last executing test programs: 3.037366664s ago: executing program 0 (id=2762): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="5c01000010000100feffffff00010000fe880000000000000000000000000001fc020000000000000000000000000001000107144e230000000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000002001000000000000000000000000000200080000000000009201000000000000e6ffffffffffffffffff0000000000001c25080000000000020000c4000000000000ffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000070000000000000002000000fcffffff000000002abd700004350000020001002000000000000000480003006465666c61746500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000240009000f04000000000000cbed00000000000009000000000000000001"], 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) (async) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) (async) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000000080)={@val={0x0, 0x16}, @val={0x0, 0x84, 0x6, 0x1, 0xf, 0x40}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x28, 0x3e, 0x66, 0x0, 0x40, 0x11, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x26}}, {0x4e26, 0x4e20, 0x2a, 0x0, @wg=@data={0x4, 0x7fffffff, 0xfffffffffffffffc, "1e3a0598fc016c6dc5f44b240d3108eccbdc"}}}}, 0x4c) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x5411, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x6, &(0x7f0000000000)=0x4, 0x4) (async) recvfrom(r4, 0x0, 0x0, 0x160, &(0x7f0000002600)=@l2tp6={0xa, 0x0, 0x6, @mcast1, 0x1}, 0x80) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000100000001000000002000000090000000000000100000003000038020000"], 0x0, 0x2a, 0x0, 0xffffffff, 0x2}, 0x28) (async) r5 = socket(0xa, 0x3, 0x4) ioctl$sock_SIOCBRDELBR(r5, 0x89a2, &(0x7f0000000000)='bridge0\x00') socket$kcm(0x29, 0x5, 0x0) (async) ioctl$sock_inet_SIOCGIFBRDADDR(r5, 0x8919, &(0x7f0000000140)={'syzkaller1\x00', {0x2, 0x0, @remote}}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000000), 0xffffff6a) (async) close(0x3) r7 = socket(0x11, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, 0x0}, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r9, 0x4) (async) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000001c0)=r9, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r7, &(0x7f0000000180)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}}, 0x14) 2.616263908s ago: executing program 4 (id=2767): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$sock_ifreq(r0, 0x8922, &(0x7f0000000000)={'dummy0\x00', @ifru_ivalue}) 2.595849137s ago: executing program 0 (id=2768): pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000007c0)=[{&(0x7f0000001a00)="ce", 0x1}, {&(0x7f0000001a40)="fa", 0x1}], 0x2, 0x1) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) accept4(r1, 0x0, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x801, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1d, 0x2, 0x6) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) socket$xdp(0x2c, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) sendmsg$nl_route_sched(r2, 0x0, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='io.stat\x00', 0x275a, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r3 = socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r3, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r5}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 2.432014718s ago: executing program 4 (id=2770): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_BURST={0x8, 0x6, 0xff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84a, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xb}, 0x5, 0x34, 0x91f}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x8f}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b922, 0x25dfdc01, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xffff, 0xb}, {0x7, 0xf}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x9}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 2.41893917s ago: executing program 0 (id=2771): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000000)={0x8, 'xfrm0\x00', {'syzkaller0\x00'}, 0xffb6}) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, 0x1410, 0x400, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x18}, 0x1, 0x0, 0x0, 0x20020000}, 0x880) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r2, 0x10, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x90) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f00000002c0)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000340)={0x0, 0x8, 0x4, 0xd57}, &(0x7f0000000380)=0x10) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f00000003c0)={r5, 0x7f, 0x2, [0xa3, 0x7]}, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r1) getpeername$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000004c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f00000005c0)={'tunl0\x00', &(0x7f0000000500)={'syztnl0\x00', 0x0, 0x7, 0x7, 0x3, 0xdd, {{0x24, 0x4, 0x1, 0x15, 0x90, 0x66, 0x0, 0x3, 0x2f, 0x0, @local, @empty, {[@timestamp={0x44, 0x28, 0x8e, 0x0, 0x1, [0x3e33, 0xfffff000, 0x4, 0x4, 0x4, 0x81, 0x9, 0x0, 0x6c]}, @timestamp_prespec={0x44, 0x4c, 0x83, 0x3, 0x3, [{@loopback, 0x4}, {@multicast1, 0xbf}, {@multicast1, 0xc2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xaefc}, {@local, 0x7ff}, {@dev={0xac, 0x14, 0x14, 0x2f}, 0x6}, {@private=0xa010100, 0x3}, {@loopback, 0x4}, {@dev={0xac, 0x14, 0x14, 0x1e}, 0xffff}]}, @generic={0x44, 0x5, "53feb6"}]}}}}}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r6, &(0x7f0000000700)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0xa4, r7, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r6, 0x4048587b, &(0x7f0000001dc0)={{r1, &(0x7f0000000740)='syztnl0\x00', 0x8000, &(0x7f0000000780)={@_ha_fsid={[0x4, 0x9]}, {0x9, 0xfff, 0x7, 0x3}}, 0x4, &(0x7f00000007c0)={@_ha_fsid}, &(0x7f0000000800)=0x80000001}, 0x6, &(0x7f0000001d00)=[{0x3, 0x3, &(0x7f0000000840)='veth1_to_bridge\x00', &(0x7f0000000880)="231d8a19744ddd9947220faa75ca9cb7200169a989", 0x15, 0x8}, {0x3, 0x7, &(0x7f00000008c0)='\x00', &(0x7f0000000900)="e0d420604afdd9941ce9d542ff0256fa405a850cafcca9dc568a1378386811c71d0d9aead424663bb1f80d3f61305b9a3c965a", 0x33, 0x2}, {0x3, 0x4, &(0x7f0000000940)='}^\x00', &(0x7f0000000980)="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", 0x1000, 0x18}, {0x1, 0x1ff, &(0x7f0000001980)=',^-#)}\x00', &(0x7f00000019c0)="26d61935ec862a4d9284fa282d9ebbaa49c986c5ee5f2d2c41c2b0324ee3d6379ecea623ad4370ddf9a54cf9a3c68ac18497d75fccb529e589588c1e2b4ae4e5aefdd59bcccf34175a00cd730c6ac0ca990e8d03c7f87e11d4f0ab59221b24c455d52a428d6a81e11562c5a30d2efb005dba1cf44c6b794add014a85631ccbdb48483ce236c2211d8a4d9ea315bb31c607582e120b91d506df5e9e06835894a212998576b95c591057abde5efcf4bd7aa56e18b5a1308e9b247ecb83cdbcab9f621c9127f22a350ad93f989f316fde4b148be337ead4a129b34c37ea72777c2374f77e822b8d69a4cb989a8ce92bfe14fa", 0xf1, 0x8}, {0x3, 0x5, &(0x7f0000001ac0)=']{,.\x00', &(0x7f0000001b00)="80657bef54ab9b113549952c549c58e66bcb3c28c8110e574e9f739668329a8da1f2adbdd154392a197c157e45854b0f4456f4932d2a44d8f2d13a28b6d7cbe80db5d5c35273d803d63eb22c6daab7bbb7fbad1290e1550c484a4e3ba1db9cac1d1710efab59ff2b780b9c472aea6bf04e18f798159ad25f76900e98366c9dc8e0bc7dc15c74331a18989552de34befe5b2b00a4b98a00a0136c7636d7d444e671e267230aea72bffe538092b9deec99ed1d22b4165d177901", 0xb9}, {0x1, 0xf, &(0x7f0000001bc0)='nl80211\x00', &(0x7f0000001c00)="270bcd5807ed4d26e09c3fc506878a93ce61644427e0d690939f2dbcb3d1c66e20a3bcf03b7da265ab4bed4eca5e51ccacb8916f77e894c5ac0f4bb2a32c70888fa0e9dde8f69caf76c3761ceefd5fe13af621c55dec27de680fa4c0dfba297a2046215aa8165a13c41d8680537e4367076c53a2a25ff1b4d922b39b202f3d5d25ea4bf5c9f2bf26eac2497cc16b88d067e0cb285401853dc19b72be0e97cef87c9c1f78123a7bc33abd321c37f8d1c5043f0eb5abf0882677c34d3f7f5bb802ae39e21b", 0xc4, 0x12}]}) setsockopt$inet6_tcp_int(r10, 0x6, 0xa, &(0x7f0000001e40), 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001f00)={{r10}, &(0x7f0000001e80), &(0x7f0000001ec0)=r10}, 0x20) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000001f40)="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", 0x1000) connect$inet6(r10, &(0x7f0000002f40)={0xa, 0x4e21, 0x0, @loopback, 0x9}, 0x1c) ioctl$sock_inet_SIOCSIFBRDADDR(r10, 0x891a, &(0x7f0000002f80)={'bridge0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2e}}}) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000003000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000003040)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000003100)={&(0x7f0000002fc0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000030c0)={&(0x7f0000003080)={0x28, r11, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) bind$bt_hci(r10, &(0x7f0000003140)={0x1f, 0x3, 0x4}, 0x6) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000003480)={0xffffffffffffffff, 0xe0, &(0x7f0000003380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000003180)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f00000031c0)=[0x0, 0x0, 0x0], &(0x7f0000003200)=[0x0, 0x0], 0x0, 0xba, &(0x7f0000003240)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f00000032c0), &(0x7f0000003300), 0x8, 0xc8, 0x8, 0x8, &(0x7f0000003340)}}, 0x10) r13 = accept4$tipc(r10, 0x0, &(0x7f00000034c0), 0x0) sendmsg$tipc(r13, &(0x7f0000004840)={0x0, 0x0, &(0x7f00000046c0)=[{&(0x7f0000003500)="f586e0688140ed8eff28f781056a05abbde4d908f5d21e23010e322d1a0b24b11a81899d9dc826a0063c848fe08a7cee5ccd4a", 0x33}, {&(0x7f0000003540)="fc084b708dec69d449c0997ce57f0a18410badb65266bf3741972240cbf307b3e280cba7fda754b6e2330c517ba338b9a56770ef7b7d303d52c0250292f579cf52a498a03ac74650915f6d7b95c4778ecfbecd5975", 0x55}, {&(0x7f00000035c0)="c2c753f09a1684c2366b9e54a215a98165b84a089fc98dac420ad5f2a7c3be013c602e4bf246db69021e87e52d00e6e06c0d43c2f760aa7b234e8c8fd8cc5e42ab79942289e62e5a1f3f20c4bcd50d5df808eaf6c95118211415c966992f1cebdcd60095aaa0bce256053b002510479f08ccdc0c0195a437693e44e743a1fd0a75a1e38b775ccad5a00e64674e2167fd8339e43ea7be561a6e14", 0x9a}, {&(0x7f0000003680)="59a52c7a2b683efdd77d5f264af3b949ad82161e9058d7e3c524b36f91981c0421b8579e59e3da62e7f5037553b956b2eea4675b1508edbe9c0c98a9b235fc0d866d6eaab5ed4277a21a66f5515da22148c1387b39f7efbbfae3093547c6b501b56716b150c29cb9c1f5ac2cf559aab7a21dbc474be606467ca0bb05c13544a56e4a6a6d9bbfda6b62c626af3ba91a37dcf5130865f237abb55d0b9c979b063b4bcde0e23e419ffe6c15f21754080a125f66d4b76fe0fe0072ec7ac739c95eef06018242558dc0c51efaeddab0730a95e144c13557ed780222763d1fa90ccefe743e4fb0a3164ba21cd7240a75372f2bde2ded021cbb85e6f21704a2985b431923f6e479d7c29c3bc7183754b119b8d3d5b4dffecd9df46e108c947db87344049d1ca8d8c25218bebc4510b0105b583ac585c58a94e0c343e328e391747cb0d8b758a91218f9e2f6b46f2abcaac0682a2792911fc43776df146b4106fb8de13201d33e26d8074173fd50df1280b853a26a89b0d64acca71bc4da37b7daacac1177da5f536a8cb2f94e2f823bd06833ecf9242c9e79ed3b7ea41b6b8d202b2598681a48d32e68852d2484b0af3538d5cd819c5f3f50b9d66376fbe5b1e4ad7d64dbfa289c0a5f7b14853422e6668e6c739887663a8d5d2c8953cb3cf7b0a31bcd53e3802164a2e0bfdd8b785ca68e39cee555ab5cf3660eab4c97fa73960410fc8a21d966973f456b144c3644c25d17182780eeec63cd8cee54e92c4c1e18b3e7efc090b6fe6348942af3e299b8b999544b3c2474b5ce54ad62f4ae4ff4f89ff937d0fa666e2058200db8c9f1f6dccad140b5dce3f757a1a04dcfdd3fc078d3c2d0540dbc8803344e5d74918bfab4d68fb517f2ce7fb0ea0798b0bf71ab9dbd745ac1280aba252e8f11c74f8b71315e9ab5de35745c584a4f05e6d83471cd75ba5967cfe18bbb64dd980b10bceac34c6d5aa09682ca1d247f112dbaf875eb398b34974daf02ec7398592227db0a8f6420829741748310a6f7b44039e41caa33dabe03f402f968c98f4f797a78a1cadaf8c366ebe6149c4d951ce82810f7acca859cc538e99d93657ac13fae4f7ca01670625fd84847953fb7588f13700e214d1d1aa9c343792393aae841c3ddc028ad952bb1f6e7a376656a0b68128ba587b80d939bedc88b0070708587fe238724247e2624d21722f3064a37125a624c3af5edc7242eb4a5949268b984238f58794ba876af52da5a7c7145daf1f14afe3eb973ab5df0b421976ea74ca961d0cd03d882f91f4cbceb7d6812b7f459c407220a15f35ff04d6d3f4effbe30a383f4d9f89d4deb879419029b7948d9120c49ccf54e4198c76e890c9121cff13f3bb1c98da315e56e987baa08377390da0287b6a0dbfae1ebab003509f427367c0a4d4f962dffeaa16eef35e66daabb069ba4c66343120c3a1a4e99c9721acd985e48cd7a4c21fb0588a374f6db75a6f093fcf905f16a8bfbe3a8c3aac4ec7b7579ff7a95e5a581e350a1a6ade67525397380dbf60178acd35b8a833543f684c4b91adf569d633ef7e02f99acbd0880fa94289721ae9f008b6a56675f1a966e561dc064521c6db61091823182e651e5d141a80b603b690665503ea3119c38bc8aaa03989305b0d0d2a5827545d09bfbf856c86cfc0f53f485badc439d76cb80e54fa0d1f34acacf42e7a40edf9bce9c6f64fcc89bc8f15aa80f974d50f8edda650cc1205caa653466461e741329d18f62ead86e3de8653df029bdaa391affc21c4b33e55056ba2f5547034b850fdb006bedd7c20aef94cecc2c2a54137e78bb77f15ef034bde3a88e04387219daa0d4c60d498159afe46eaa0775170d50fd9d82fa22611a8789abff7ef44ebb5f05265f9124325553e89983ddb86a35fd5ff09edb3e5bd3ba686492e8f7d819522c1e94bc66e465f2639b28957394146dfdb7cf76353f07830d7848d3ff961eb7a9aade643f0d826dc631fa8ab515dc6a2815c3916a56a08bed60ee08c6a40d1c044b483031bca526a09d985ea6f3e6ca57991e807becea2334260ba7ade38ed58826e2328996bebb6ef884e87b3677991ff12cc7dd477012774335028c09922beadf25644a7a94070856e988de8c1b5fd2335f30edb0f13708b1fadba626bdf00f5887236d3dfa43b6aa7dc386514a43407e8360c7d06057da1c62e52fc5cd5c588ac8c1be533e7656ab161811c994e8cbe00f77d7d7256e94520626b17d4e80e1d79f09b1c33d1569745600b4fe42e2958130ace0ba60543e890773129fd8dfb8668b42a2a29ee6c6a27ee182c14a331fc47ddd8ae13086ed6823cb096a6f8a14ed4bcc703a30710f085cf096aa5a0b331f24dddfd5f227eea9829b3062fc518f6188436d61571937c1bb788cfce704a0c905631088590964987ec7f852b1ef4b522e47179c9b8a23bf90610f0dfe2443df44a297dcb32c727f8a061afe1dc87ff133d4d33d83d918dc9374a59ea5cbe7758929fcdd8045d7dbfb6cfe235db75acb89289deac0442b8d6bd71e439c8871f4a827f56187c513f99221d266ed18e0afe37f28639851b2822cfa337fbebb37bd9789e21afea4aabdf1358d24f266772ecae8e514c08aac857bc4d1ea974d42fd23d3ee0219f744bebc5a4b390e1de2016e086febaaf5230bb631c7261d519b3058ea33d65f828e55a7b6549b9cea08e5d2c65ee39014f5986f98e216ba6c2796e86d2e8bc2ba1d0e87503f5109603192b048103429dbc072873a06665f5c412d3cc79e401bbf7dcaa9b250a64f132335866b47767abca48c2df25b0cc0aea71ac964861f1fa8026c9290f72ec5a8cf224383af1949795d6c09401cf66845dd42829e2b74c9713906e55a18b3baaa1630a6bbe5a20321e37039a25fe5eeb450794b0415880df46b363519baac1825ae542731beb31df6be98e10e5849ff0d0a0d77c0c798750f94e885b903c5aaa89a5c22e104772207fa9445cfc1a884c499d75fb899d74cc83ca66022ea8edba6a6ca209011e946d0a2c28243ab957d4e9c666136d8cf43851185f0e5f7958276dc63f2173d714db62da56db87fe88467ca185da99e84522567fcbf211631969c44c79f99316ba02b2e740e3c4e81349fe1623e910370896765c8e69ad9de4518c3cd70df693c26e262fbac2c739ad96fd7a012104c78fc6825c858365ccb96d59cf2e7399fb7912eb15e5c293a5239f8c7f3ff2259a2403823df083aa31948f8a66685efff828d0132f57f7257ffb75b741c93b6433fab68b9613832f511d439077fc063a0b01230b4fb984527b8d15c04f2f7be0e71e08f75499efc0c75127efe3ee14bfe4a728dec285c2b57a991921d24851ebe84bcfae3f60043f31e60df902300fca35a1c7756a87e7f6686164d9b4ef115f299ae59c935e455aa99ad5efe7fe589997120f6083d7f2465b550b93373ecd4313c16f8731fdafadd724efc96950143be5e0ffeaae3c0900cae7fd999679b8e9b4a63e5eaeace5a765c9f17a0506aae7cae65ac731bfaaec0f72fe1481bb7a3b5c9beb53709b200c80f85e255a96771f4dd8df10195613b4d1737be6b846015c56171ae3d39af9b7b43b26b8a773c1057827d01abaa1a0ea003768a26e32e24301a420bccdca7cf18a612da90fa87db2cbefc50f5e653943eb5bf7c54d0e34782c059159d478b9073ec60a17e4876a6d858eb3efb7f89bbf375bbf0c181dc0cc0c7bcac94d18274df1253a8c3c3e06bc0c2a59f6a1d985f28e1d3b058db281584b04e87ae8cc2382c7facc4a1c380b0c90f8f6df1aa433c9faaa7b86b7540ad220e80b5de8ef783ea105eeb165554f14b5444118cb8ef9ca36137e8d3f54e9a1a0a264ba50a06aa1fe75525a3baf8ac78e21b06a76d2d7aeff4aa3b7d0286437dc03377326401f143436d0b443b32f515037fec5ba5c232e94c774ffab25305f54602f4edc0b7786ce4b47b860b1e9180658d9f224c75fd1dafe294cdc9084081e0eae2c99145f4ede61b395796c2976157fda40778081b6af215ea7aa30bd453292721184d1db05fd58a5c6e3b0a83fe14ef0a74fa70c5e2ace427947e6bcf4918900e1d04b92dd43b6e61574770db8f4dc9eea11444d974966ec8c4567a24aa6c2b5f00a24f8d71fd1adb30193ec9c597e1038246d1e9f1fddbb0b798828e22a99e05b690a750b2b229a5f64dc13ef8959c6dde3bb94e2c7ba37c109b741376084e27078cfce2bb0340c70bd3f2f1f437817cf3238a6c313535f17395d0ea46273be43b8bc2d7139d52a8bb638b1fb49eb63bb5b28867a794fca17f311064312bfbf30b359f9fa438480ee5fcf611640544acd8ae51c326ebbd4de3229abadce44a778af1a6ec5abcc683e4377785eee68d5dfec43f05ec1cc764550e3a7861200c34aeb979d02aefd46a94e114ffb1e01b28b77a886ac89794f6e1ce51cfe46fc32d442396eb0995176e9fd18ec251c71a3bb938125a304ac59545856ba0f6d25895ca49e35c808671ffc34c32a7e2a6bc204654378e4331796fab1461c18a1fad7e4a0ed644d5529e59f92d3f5ae60de89a85404c9ac66da2ea26d35a8106b442313f60af99608023663ff00735d61ca7b944a0ec25c38eb499a233e977a243be3008b65cb6ebdefad6b4f34699f9d6942d8f7fc76281ba55be1efc10ae2e355494caac367277057f12f7d3225cb9763c87acfad24301db201c043396111b8b51eab7de5970ab7b116107dbcf129cf7eaf1e4b76b96e004f844856b7bf545215dc0c1ffb583485a280c9f88044f7ce10c67d971ec621ca23fcf1de7e70a45b3d509e96ef2f54e7c131b02005fd234710fe67aba21b39bec29e538a8110fa33ba9e3ccfe2dff404b841d2c081dcdf8f476600dd3644e4f9671eca2ce2085d109c7d46e63059663ce8de7aab6975fd679292178bbd4b9f1ba7a33d864fc8872771c059f3e6d21d534cffa3197aee9cfcfa2e445833a242fce48e8bdba15b1a1017ba85c932e5d23de6ae5b3e1fcaf0e84464176da9f4db3c68fb16e3682684398db4bbe36cf7a14aa604c0bdf3a0844caa232cf83fa62ed1b8190ae6be79864079d4414a9dd8d4741a22bf0f6258b489d08440d414a8aa6e06c85f7d7c5153ad8db257ca78f7e3332adb4a7118b2f93fb5d137349675d1745fba73db0ec367a77d5189d7910909a65b025cc13f84c0f8a60adb73a3118e10ccaf63d9dba3cb67ee999d720a67b70626f0e1db02dfff63198a8a80c04191c08b0d92c66817fed0428251987a38f3e240105ceb6cdd266ec327e4ef6cece2df8c56eb6fb857ccf99a76d440ea7dd4e0928190466264e4f8db2d53eb1999d6c9bc9157f9d38a5bb27656d2d28e0baaaa1cd0b34f062f7575d22c1fc9321728e9c4d15f914a286cebb02914f4d1e759f522088dfae9168762b33608b0ad095e8b795871f656141bc86fbe1937f1d5be31182c180b5a1bdb50bc0e1e400cea01cfcdb455fda6ec8cf06cd11fb6af83668a1b621793d71bfebce066aa54409113989f0ccb0b7bfba65e89027bfa9bbde639758f37b5f0ca6acb7ff81136fbd116cba82b458622513d76074188c10abdc94f26ed1d10cb05733a070cd5142b7868069a6f47a98a5732054f159a85e8f4d734514506130b5fd60fa6c029605e9c0317df41eecb6c113863bf51bed40ec1d4b4013c86e16cdb9edde7f212765c242c977ee61c11676ca89f9717fd36cb1dae9f0b8f51d9d6a30993287724092772f511c8d70da557533011f319025022985401c84f8cb91747900f8dd7b", 0x1000}, {&(0x7f0000004680)="102f1985f8ec", 0x6}], 0x5, &(0x7f0000004740)="9231d29ff82ba6cab8b1c61ece4f30115f6a4165cda34d2a2cf93f7c956642bf30b41c74135ef17f86e18e265c897d4c164744eb9ab7abfcf7522558fba6b557c719c5a174bf1ebb99d6fcacebc00484071a60abba0ca9fae527065f62f870ad49fb132af0fc04530fe673ab7eee6db0dfa5825ad79b52bd007766a99722ea300fc6ec75e0c1ebb92e1d4d0505c8396e7e6765a30fbba7926fec51004e66307435130a7ca7968426e2a3c032e402d19ee7e9ac561e59cd2a1537516529528438d7785642cee133a439860b11ef156cfb22a2198bd885cee299c9e45c9e1c58", 0xdf, 0xc4800}, 0x40) 2.156418489s ago: executing program 0 (id=2774): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xfffffffd}, 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{0x1}, &(0x7f0000000200), 0x0}, 0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574000000000c000780080006"], 0x5c}}, 0x20084884) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'aead\x00', 0x11, 0x0, 'aegis256-generic\x00'}, 0x58) writev(r0, &(0x7f0000000880)=[{&(0x7f0000000540)="008f06cdec9ebac7afd4804f53", 0xd}, {&(0x7f0000000580)="6e50755072febe528f196602a84d5eb483d5b34de511bb0a39047c59e688475d", 0x20}, {&(0x7f0000000600)}, {&(0x7f0000000740)="880375ee5953a63a4f53b7071cad23b939e09b14c106da03705d3daf3e673db24ccfa61cee76e9c981d96175b945aabf1166925c755be2917bf588f254bae6b8e93a5c1f59ad1d6ed4663a1b272ceef232be9642f415735a70ccd4864f069b4cae4a84e9388d20752fcd2f607baa9c515611509c3df5dc70e9068675144ce8d5cef2be5e7796940710563c4041f5e5e8369307a1d83f373971d28885f33af3ce0b2299c58109688309c46cf4c513a1dbc46c6b", 0xb3}, {&(0x7f0000000800)="d296af5e29275ed9379ec25a802cb5d99489b1bf492edfc0c482017a6d0d822ded73bb0c4c4a2c7791b7adc8a1997f83d28293903f49e7ed8d82c80387f6164cab7045371e9309cd3b463e853a28c825df492c3833d67113ba", 0x59}], 0x5) bind$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x48000, &(0x7f0000000200)={0xa, 0x4e27, 0x3fd, @loopback, 0x10004}, 0x1c) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa800135c9734f8f36d524bc987f6bac30f41007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffff", 0x53}], 0x1) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) sendmmsg(r2, &(0x7f0000002100)=[{{&(0x7f0000000100)=@can={0x1d, r3}, 0x80, &(0x7f0000001580)=[{&(0x7f0000002140)="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", 0x6fa}], 0x1}}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000080)={0x0, 0x7f}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000240)={0x0, 0x81, "7bf8ec152fa16d39e4553d9607191c01003f4f261459314625abafbae09b2f3f5bd1d92f8a3b28f86ac6911e26622113c1d519b46c2b1bb9b76cf8008d37a06e88b31100ae16fcb20ca3c5e2bc78d0014278c1e4c7fb4ab35e2c3ae32abc7bf205fd325765be5684ece2933f3325ec9cb8b4725605bf2722d1ded87089430c8a35"}, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}}, 0x40040) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="580000000206050000000000000000000000000805000400000000000900020073797a32000000000900020073797a31000000000500050002000000050001000600000013000300686173683a6e65742c6966ac63650000"], 0x58}}, 0x40008090) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x99, 0x7, 0x0, 0x1, 0x5392, 0xc, 0x9, {0x0, @in6={{0xa, 0x4e20, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10}}, 0x81, 0x3, 0xc, 0x4b, 0x9}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e64000000003400028005000100"], 0xc3}, 0x1, 0x100000000000000}, 0x0) r6 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040), 0x0, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYRES8, @ANYBLOB="010026bd7000fddbdf2506000000140002002001000000000000000000000000000114000300fe88000000000000000000000000010108000400ac1414bb2b00070073797374656d5f753a6f626a6563745f723a7373685f"], 0x70}, 0x1, 0x0, 0x0, 0x4}, 0xc8a0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) 2.060856708s ago: executing program 4 (id=2775): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1b4, 0x17, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xac, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9ec2}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macvlan0\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'veth1_to_bond\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}, {0x14, 0x1, 'ip6tnl0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0xbc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'batadv_slave_0\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'ip6tnl0\x00'}, {0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'veth0_to_bond\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x800}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1\x00'}, {0x14, 0x1, 'bridge_slave_0\x00'}]}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x40880}, 0x800) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), r2) sendmmsg$alg(r2, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4000045}], 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1b4, 0x17, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xac, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9ec2}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macvlan0\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'veth1_to_bond\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}, {0x14, 0x1, 'ip6tnl0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0xbc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'batadv_slave_0\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'ip6tnl0\x00'}, {0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'veth0_to_bond\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x800}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1\x00'}, {0x14, 0x1, 'bridge_slave_0\x00'}]}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x40880}, 0x800) (async) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) accept4(r0, 0x0, 0x0, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), r2) (async) sendmmsg$alg(r2, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4000045}], 0x1, 0x0) (async) 1.36047632s ago: executing program 1 (id=2782): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001000390427bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000107697036746e6c00002c00028014000300fe8000000000000000000000000000aa1400020000000000000000000000000000000001"], 0x5c}}, 0x0) 1.244961716s ago: executing program 1 (id=2784): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e5b, 0x80000000, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x5}, 0x1c) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f00000002c0)={{0x0, @loopback, 0x4e20, 0x2, 'lblc\x00', 0x8, 0x81, 0x1e}, {@remote, 0x4e22, 0x2000, 0x7, 0x2, 0x7}}, 0x44) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="38000000100037040000800000002d67a2be7ed9", @ANYRES32=r4, @ANYBLOB="c3040500000000001800128008000100677470000c00028008000100", @ANYRES32, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x38, r2, 0x3, 0x70bd29, 0xe, {}, [@GTPA_LINK={0x8, 0x1, r4}, @GTPA_VERSION={0x8}, @GTPA_MS_ADDR6={0x14, 0xc, @empty}]}, 0x38}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) 1.200001866s ago: executing program 3 (id=2786): r0 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="d5"], 0x24}}, 0x0) recvmmsg$unix(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000016c0)=""/172, 0xac}, {&(0x7f0000001580)=""/60, 0x3c}, {&(0x7f0000001980)=""/236, 0xec}, {&(0x7f0000000480)=""/4088, 0xff8}, {&(0x7f0000001840)=""/115, 0x73}, {&(0x7f00000002c0)=""/236, 0xec}, {&(0x7f0000000000)=""/126, 0x7e}, {&(0x7f00000018c0)=""/133, 0x85}], 0x8}}], 0x1, 0x40010122, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@delchain={0x24, 0x2e, 0x501, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}, {0x0, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) socket(0x10, 0x3, 0x0) (async) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="d5"], 0x24}}, 0x0) (async) recvmmsg$unix(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000016c0)=""/172, 0xac}, {&(0x7f0000001580)=""/60, 0x3c}, {&(0x7f0000001980)=""/236, 0xec}, {&(0x7f0000000480)=""/4088, 0xff8}, {&(0x7f0000001840)=""/115, 0x73}, {&(0x7f00000002c0)=""/236, 0xec}, {&(0x7f0000000000)=""/126, 0x7e}, {&(0x7f00000018c0)=""/133, 0x85}], 0x8}}], 0x1, 0x40010122, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) (async) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@delchain={0x24, 0x2e, 0x501, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}, {0x0, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) (async) 1.135302168s ago: executing program 4 (id=2787): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="8e100000181401637015719db9db3cdcfcfc07000091d6ff00000800010002000000"], 0x20}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYRES64], 0x2d4}}, 0xb3d9d64e5fbaf33d) 1.013248652s ago: executing program 3 (id=2788): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipmr_newroute={0x34, 0x18, 0x200, 0x70bd27, 0x25dfdbfb, {0x80, 0x0, 0x0, 0x8, 0xff, 0x2, 0xff, 0xa, 0x1800}, [@RTA_PREFSRC={0x8, 0x7, @loopback}, @RTA_DST={0x8, 0x1, @private=0xa010101}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x4000040) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r2 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r3 = gettid() r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000180)='ns/pid\x00') getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x11c, r1, 0x100, 0x70bd2a, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r2}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x40000}, 0x200080bc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=@ipv4_delroute={0x2c, 0x19, 0x400, 0x70bd28, 0x25dfdbfe, {0x2, 0x80, 0x14, 0xff, 0xff, 0x1, 0xc8, 0x6, 0xc00}, [@RTA_SRC={0x8, 0x2, @remote}, @RTA_SRC={0x8, 0x2, @broadcast}]}, 0x2c}}, 0x0) socketpair(0x6, 0xa, 0x10000, &(0x7f0000000540)={0xffffffffffffffff}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r9, 0x8983, &(0x7f0000000580)={0x8, 'vcan0\x00', {'erspan0\x00'}, 0x1}) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r9, &(0x7f00000007c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000780)={&(0x7f0000000600)={0x14c, r1, 0xa02, 0x70bd27, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x56845675}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7fffffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x80}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3ac47393}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x8800}, 0x20000400) ioctl$FIONCLEX(r9, 0x5450) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r9, 0x84, 0x76, &(0x7f0000000800)={0x0}, &(0x7f0000000840)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r9, 0x84, 0x6d, &(0x7f0000000880)={r11, 0x5d, "501eb33d8283b96a282f6b00e0d26e11ba175a3e9ddabb06c5cfe78b459206a30741a5e2544a928b7c9c5f3e408baf13a75ab7cbb0db84864e315c5f9d52ef0d0de924ff2a688a6ce17d7f5644dfae866ecf5c04a67e2343882bf06ddb"}, &(0x7f0000000900)=0x65) r12 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r12, 0x541b, &(0x7f0000000940)) r13 = socket$phonet_pipe(0x23, 0x5, 0x2) r14 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_FIOGETOWN(r8, 0x8903, &(0x7f0000002040)=0x0) getsockopt$inet_IP_XFRM_POLICY(r12, 0x0, 0x11, &(0x7f0000002080)={{{@in=@initdev, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@local}}, &(0x7f0000002180)=0xe8) sendmmsg$unix(r0, &(0x7f00000022c0)=[{{&(0x7f0000000980)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000c40)=[{&(0x7f0000000a00)="fd1ac7ce2a363c7d13be044b9bdf9fcd7243a1d0dea762e8cc9532cfbfdfbe08556357b0ed8381aed131a90d74c9749578bf3f197cb5a7b0688cedddb196b32b22fd98bf6edb9358846b2d768f9483a2b89b4393e8faed609b32ff83e62d6cdc", 0x60}, {&(0x7f0000000a80)="3b62612375365f6f2dc66530979459c2ff3ae7e614ff124b482a6ccc7adcb636f49f6a2389a919d41f74978bd0cead760fa15dbf1e0d1e7546b9f47cab97e387df977e7ae497ac7c19eebddfb33c49f00046ebce63e106157b66f211fecfc37e22872a559221e8fd41f145ccc45c72f80816738111084a721c693535697b5841e7078501e50207fb36c3860b1f627f7aeb4eb28d7f377003c2f0d04c6760074fa1b16066610cc8752abbf0d09d682f5f1b1984806c1d74cf7629e1bd4a46af4831caf20a1964bc018ccc4ca5274227cbb0573c67004089fcf4782264582d6952b098ffd7cc7a473b58c8ff8e", 0xec}, {&(0x7f0000000b80)="fbad03b275598ee5e2d17dadc7463bb91a265b2a9733a90602daeb56c36e0fda42322b8743d6e723205f1fa3d2a8855361885f26f6f88d4656debee21e22629d86f4bca3e0adcfe6b088135b463b98bd1a1d0325a1f554ce7cd3c67b1281fac69f6aade0e391ec6d081ba2cb2f51e54da6411ff92851e79a713eabd1f2f2d03ed5383ae168f36ddceec311d8d11256", 0x8f}], 0x3, 0x0, 0x0, 0x88d1}}, {{&(0x7f0000000c80)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000e80)=[{&(0x7f0000000d00)="0f8dbe700e650ddf2f0cfd56ac5eab05f1a677344292fa18fd63dd7419a5d36e6f1da7451b97f888df805bef0df4bebf2242d8bd5b1ac0f2cc79413ce7c9f634e9a269568035", 0x46}, {&(0x7f0000000d80)="e58bead1608beb0c5d26e33f30881892307db01c7b398adc8af8cdbd1263c8dcd5c1b9a95e18d1668b30b6ac3514079031952894394a68c56cdd3e07d65e857b230874710e4020fa5df4d050fb6419fc5d3f1c97fdfed7db500318f1853d285451630032589c8ae70201ccd05619f15b9bcf80d363c4aba84de128050d276332e39caa784ccfa8073275a25d6a110c42fb635a9ca89fbfcd72b75d08da62f4d0e18fe336740b597c0a0367bca2e85e3da17c0747d321f26352d372a3d793befd3d43d8516ef755c53214e8c5a186f5dd71fd422371ba1efef9bd", 0xda}], 0x2, 0x0, 0x0, 0x10}}, {{&(0x7f0000000ec0)=@abs={0x0, 0x0, 0x3}, 0x6e, &(0x7f0000002000)=[{&(0x7f0000000f40)="0d918a4ada5130f58f6912894f2afe838a53cabde141737305a07bbb6ec8bb4a2877ab63ab4efce8095a5f6e67c2e9d20e55ead7d67620c968", 0x39}, {&(0x7f0000000f80)="d1a13f9d17e26c1dac769e0485aab78dec66b4bb7605dc16d350a6c0d3ec07024153cf1ca760a745aa8a49fbcedbede4de38b8f102ab2eb0242f432b2e3db9c3a16777cd192d880fa63d3d11baba72527ce8180c31ad071efe9b6eba10a17e", 0x5f}, {&(0x7f0000001000)="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", 0x1000}], 0x3, &(0x7f00000021c0)=[@rights={{0x20, 0x1, 0x1, [r0, r10, r10, r10]}}, @rights={{0x2c, 0x1, 0x1, [r2, r13, r9, r2, r0, r10, r14]}}, @cred={{0x1c, 0x1, 0x2, {r5, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r5, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r5, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r15, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r3, r16, r7}}}], 0xf0, 0x60048d1}}], 0x3, 0x4) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000002380)={0x2, 0x19, "1853246c7283e45fcc9ffb0190eedf6a3382d201f71ff19e36"}) sendmmsg(r14, &(0x7f0000002500)=[{{&(0x7f00000023c0)=@caif=@dgm={0x25, 0x3, 0x5}, 0x80, &(0x7f00000024c0)=[{&(0x7f0000002440)="9c39fbd0544ca6c4df9b239330a21a8c7308dae6b16f9a350ce4889518e6b045afd2a39385cf2597e06607585a86b520dce91d8c0a092255f6877b558234d1e5228a469a6eb32aa26265c1", 0x4b}], 0x1}}], 0x1, 0x8001) socket$inet_mptcp(0x2, 0x1, 0x106) writev(r4, &(0x7f0000002900)=[{&(0x7f0000002540)="58fd0dfc0125def2debbc0daf8458ba6270e1134ecbd9e54c8bc7f391e124f181662e2cc2c02daa428c9", 0x2a}, {&(0x7f0000002580)="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", 0xfa}, {&(0x7f0000002680)="1b02fa7764b801c26480f2af82f29fb0399f73a4c584a043e0ca6d804cdbdbbfa8a677d8a43bbe3c916cf94fcad982af26ec763d75393005bddfce15c4d1f60e92360b117f82bc28f6367540ea4f21122d42b7c64f3533573957aa3344b605b894c58a34acf55cdaa283b6354d68ff1e1f52c6d906ec9cabd38a5b8abb0f6cb090a99666ab0c1d1f578cfb20a0d8cb7d9805d1e31b73890f903fe8cf0ba62eabca28029b7082a9c9ae5b1b50f324b92f79c9e28905d278123c7a62c38c4b6c43343a70281ce889fdf63bd6567448ab0b240569e595d55b873bf38e0f1426fb61239b0bbb61822a13de36c2df76efbdda5b3d510b630ea440da", 0xf9}, {&(0x7f0000002780)="8dcd911b87037c05e5a90a64e1bb8ee9d55d9d6d67ce2d9cdac97ac9ce3d80a3a855c45ca03e899bd33c827039e95f8682aa0a25760d5b5d03fd39cc399392d741a89442891f3101e39c48413aaa9c6c698d8d7647b1495a2995e59ef422384fe51318d67b289005c36a5977a133580af7d55a228d3f774f7adf5f250fa584565b2ec70d005137e749250524bae8ee1eace2492b1d238b7ab2d2591df8f0756daf3a5ce4150ff11cb8cb17579ef3bd212d518f3fb3d48647793c08dde0da94e2610f98eaa8fc8277ed380b8d6a18c43605c63a85e6698e4c695a3bcccd312f3e9e19c79788e2b46bebc006ced00ffda44fe185f0", 0xf4}, {&(0x7f0000002880)="964539924e4563ba96", 0x9}, {&(0x7f00000028c0)="c3df233ce09eaf981b", 0x9}], 0x6) 1.012939719s ago: executing program 1 (id=2789): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000fd0020851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000ff6608fffffff3f800180000000000000000000000001000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xe7, &(0x7f00000027c0)=""/231, 0x41000, 0x1e}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000040)={0x1100, 0x0, 0x7fffffffffffffff, 0x10003}) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000180)={r0, 0xfffffffffffffff9, 0x5, 0x4}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x18, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfeff}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x80000000}}, [@printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @jmp={0x5, 0x0, 0xd, 0x0, 0x0, 0x2, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x20}, {0x85, 0x0, 0x0, 0x2a}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x500}}}, &(0x7f0000000080)='GPL\x00', 0x3, 0xff8, &(0x7f0000000780)=""/4088, 0x41000, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) 983.097162ms ago: executing program 4 (id=2790): r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x20008805}, 0x0) write$nci(r3, &(0x7f00000005c0)=ANY=[@ANYBLOB="610308060102055709"], 0xd) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), 0xffffffffffffffff) syz_emit_ethernet(0x0, 0x0, 0x0) close(r2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000080)={r7, 0x3, 0x6, @random="7c6a97bead69"}, 0x10) r8 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r8, &(0x7f00000005c0), 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r8) r9 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x100, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r10, {0xb, 0x4}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x6, 0x9}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240080c1}, 0x4008810) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xe}, {0x2, 0xb}, {0xffe0, 0x484c10e0d22b6613}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x0, 0x0, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x58, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$ETHTOOL_MSG_WOL_GET(r2, &(0x7f0000000640)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0xc4, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x4}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) pipe(&(0x7f00000000c0)) bind$packet(r6, &(0x7f0000000040)={0x11, 0xf6, 0x0, 0x1, 0x9, 0x6, @remote}, 0x14) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r7, {0x7, 0xa}, {0xd, 0x9}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) splice(r1, 0x0, r2, &(0x7f00000002c0), 0x6, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001e006d5a8ba82770e6da1039a752e87459211000000000000000000700000005000000000000000a00020077a9e20000000000"], 0x28}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 942.072625ms ago: executing program 2 (id=2791): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000f0000000008000000180001801400020073797a5f74756e0000000000000000001c00028004000100140003801000"], 0x48}, 0x1, 0x0, 0x0, 0x200c4011}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r4, 0x891c, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="240000004000070126bd700000000000047c00000c00c28008000900", @ANYRES32=0x0, @ANYBLOB="78eee5cb8cc5366737c6e4dfc3be1540621b080c4bc680636fd2c348f9cfdc3c3267188ca3e6c9081ca3e57b9e81499134668d6e0295b8e9b1b1d06db04cc5715fe29ac77413817a0353498269901c63cc339715d2c57fd735f0c9a48b8bb6ae6558498d5181419989ca0bc411452e08c11e2165f2b72ba43c9eac71665a9fa62be92fbc5f5218ae47becf7222428dce9f8c1928598ec286a16207dc05b5b1e353720a347d9c67c3a464059fc8cf843976420c7b8533786871632d681f841d984bb5e5043d16b741ade7ef459b422a146d307397100c41339051aa0ef74bd5b6"], 0x24}, 0x1, 0x0, 0x0, 0x4048081}, 0xc000) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x0, 0x0, 0x80000008}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0}, 0x94) r5 = socket$netlink(0x10, 0x3, 0x0) (async) ioctl$sock_qrtr_TIOCOUTQ(r4, 0x5411, &(0x7f0000000080)) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x4, 0x4, 0x2}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1a, 0xf, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x8, 0xff8, &(0x7f0000001e00)=""/4088, 0x0, 0x5a}, 0x94) (async) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000340)) (async) socket$netlink(0x10, 0x3, 0x0) unshare(0x400) (async) r7 = socket(0x2a, 0x2, 0x0) getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0xffffffffffffffd2, 0x1, {0x3ff, 0x1, 0xfffffff8, 0x0, 0x7, 0x7f, 0x8, 0x5, 0x1}}}}]}, 0x58}}, 0x44884) r9 = socket$netlink(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=@newlink={0x24, 0x10, 0xffffff1f, 0x70bd2e, 0x4, {0x0, 0x6, 0x0, 0x0, 0xffffef81}, [@IFLA_IFALIASn={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) 840.769868ms ago: executing program 1 (id=2792): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000006911d4000000000006010000000000009500000c00000000"], &(0x7f0000000080)='syzkaller\x00', 0xa, 0xc1, &(0x7f000000cf3d)=""/193, 0x41000, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 836.175149ms ago: executing program 3 (id=2793): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="90000000", @ANYRES16=r2, @ANYBLOB="01002abd7000fcdbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="7400028038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000600000038000100240001006e6f746966795f70656572735f636f756e74000000000000000000000000f1000500030003000000080004"], 0x90}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r7 = socket(0x2a, 0x3, 0x5) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x2}]}}]}, 0x3c}}, 0x0) r9 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r9, &(0x7f0000000580)='blkio.bfq.io_serviced\x00', 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x8, 0x1, 0x9, 0x400, {{0x10, 0x4, 0x3, 0x2d, 0x40, 0x67, 0x0, 0x0, 0x2f, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x2b, 0xa1, [@remote, @multicast2, @dev={0xac, 0x14, 0x14, 0x38}, @remote, @private=0xa010100, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x20}, @rand_addr=0x64010101, @multicast1, @multicast1]}, @noop]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x29, 0x9, 0x2, 0x9, 0x44, @dev={0xfe, 0x80, '\x00', 0x23}, @rand_addr=' \x01\x00', 0x20, 0x10, 0x8}}) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f0000000280)={0x1e0, r2, 0x100, 0x70bd2a, 0x25dfdbff, {}, [{{0x8, 0x1, r4}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x7fff, 0x7, 0xe, 0xfffffe01}, {0x8, 0x5, 0x8, 0xa74}]}}}]}}, {{0x8, 0x1, r5}, {0x174, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r11}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x4040040}, 0x4008000) 701.493147ms ago: executing program 1 (id=2794): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_BETA={0x8, 0x6, 0xa}, @TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x20}]}}]}, 0x44}}, 0x20004055) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_emit_ethernet(0x5d, &(0x7f0000000000)={@multicast, @multicast, @void, {@llc={0x4, {@snap={0xaa, 0xaa, "15a6", "b84a6c", 0x886c, "84719ab7ff8f9cef5aba4f399158d4ef9ed4f0c5487ceea3e65b7a57b3d052ce610104cfcf647a850e42b28c84858f78a9dff9488fac50856a8bd8de72fa9445b16cd4a0d565"}}}}}, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x24044044, &(0x7f0000000540)={0xa, 0x4e22, 0x0, @mcast2, 0x4}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002ec0)={0x18, 0x13, 0xa, 0x801, 0x70bd2a, 0x25dfdbfd, {0x3, 0x0, 0xa}, [@generic="ebae17"]}, 0x18}, 0x1, 0x0, 0x0, 0x4008000}, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 699.225423ms ago: executing program 2 (id=2795): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x2a, 0x2, 0x0) bind$xdp(r3, &(0x7f00000000c0)={0x2c, 0xb, 0x0, 0x30, r3}, 0x10) getsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, &(0x7f0000000040)=0x7, &(0x7f0000000080)=0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x28, r5, 0xda409aa40cc3acf1, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x4044081}, 0x20008000) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r7) sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010027bd7000fbdbdf25010000000800010003000000240004800500030005ffffff0400030002040000000000000000000005000300060000000800020002"], 0x48}}, 0x40080) sendmsg$NL80211_CMD_UPDATE_FT_IES(r1, &(0x7f00000009c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000980)={&(0x7f0000000a00)={0x360, r5, 0x20, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x4, 0x27}}}}, [@NL80211_ATTR_IE={0x73, 0x2a, [@random={0xf0, 0x6d, "a5d7b778cf90513c100bf9424bff4c6e0595ab65c678ae0a779a6ecb6d640c28a0699e8f755836b9253a62f51ed949b8c38f3c7a26ba031eff9d22027f4a13292c15233b45582d41ea5a84e99f915e1f9d7b7dd713ecb0e1d771b79d12a3775b50d13f666ff10668872d35c85c"}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x9}, @NL80211_ATTR_IE={0xe2, 0x2a, [@perr={0x84, 0xbb, {0x50, 0xb, [{{0x0, 0x1}, @device_a, 0x10001, @value, 0x40}, {{0x0, 0x1}, @broadcast, 0x4, @value=@broadcast, 0xc}, {{}, @broadcast, 0x0, @void, 0x3b}, {{0x0, 0x1}, @device_b, 0x6, @value, 0x32}, {{0x0, 0x1}, @device_a, 0x98}, {{}, @device_a, 0x5, @void, 0xc}, {{0x0, 0x1}, @device_b, 0x0, @value, 0x2e}, {{}, @device_a, 0x0, @void, 0xe}, {{0x0, 0x1}, @device_b, 0x4, @value, 0x15}, {{}, @broadcast, 0xff, @void, 0x13}, {{0x0, 0x1}, @device_a, 0x5, @value=@device_b, 0x1}]}}, @ibss={0x6, 0x2, 0x8}, @chsw_timing={0x68, 0x4, {0x5, 0x7}}, @rann={0x7e, 0x15, {{0x0, 0x6}, 0x3, 0xfa, @device_a, 0x2, 0x7, 0xe71}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0xffff}, @NL80211_ATTR_IE={0x38, 0x2a, [@mesh_chsw={0x76, 0x6, {0x5a, 0x4, 0x8, 0x8}}, @mic={0x8c, 0x18, {0xc2f, "0bd01032928a", @long="f75488e43b9c40c8127652f24ba541c7"}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x0, 0x0, 0x1, 0xf8, 0x40}}, @mesh_config={0x71, 0x7, {0x1, 0xffffffffffffffff, 0x1, 0x1, 0x2, 0x9, 0x1}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0xf74a}, @NL80211_ATTR_IE={0x14, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0x95, 0x1}}, @cf={0x4, 0x6, {0x7c, 0x3, 0x8, 0x9}}, @challenge={0x10, 0x1, 0x7b}]}, @NL80211_ATTR_IE={0x181, 0x2a, [@supported_rates={0x1, 0x2, [{0x5, 0x1}, {0xb, 0x1}]}, @cf={0x4, 0x6, {0x1, 0x2, 0x7fff, 0x7}}, @preq={0x82, 0x25, {{0x1, 0x1}, 0x0, 0xff, 0x3, @device_a, 0x9, @void, 0x4, 0x0, 0x1, [{{}, @broadcast, 0x101}]}}, @mic={0x8c, 0x18, {0xc47, "46d8bc56aaeb", @long="8942df22a722cb3b5b995f23a9928adf"}}, @random_vendor={0xdd, 0xcf, "3c1d962af7224dccd9972a1a18a9b8c16e1b1f3b7d15a6ed8f51017c01437c4c68d81c28119afe03dee571f609bb0ae62ebe1564eba6f2604c4139d92e7c354f6d9760117a8359ee4de6bacaf8717aee4b6d91b85ddc0efbbbc2fcbcc825b3d4e1da32a71caf787af8d84cc1be537a81e3ceec72790a4033907241cfc54456ae75bd5cff779e3e7d0c0fdcd698f3f2e6958fe2de0b0c1947a1ca2fe450f4dc43b933ae4e84e24ecb1387fcec3abaeae9265a24d8a902a5eb8063dc1d1e630f9c16bdf21a9bfc939071546b8785e99e"}, @mesh_id={0x72, 0x6}, @perr={0x84, 0x55, {0xe, 0x5, [{{0x0, 0x1}, @device_a, 0x7, @value=@device_b, 0x22}, {{0x0, 0x1}, @device_a, 0x7, @value, 0x25}, {{0x0, 0x1}, @broadcast, 0x8, @value=@broadcast, 0x27}, {{}, @device_b, 0x200, @void, 0x24}, {{}, @device_b, 0x8, @void, 0xc}]}}]}]}, 0x360}, 0x1, 0x0, 0x0, 0x801}, 0x80) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000020000000900010073797a300000000048000000030a01010000000000000000020000000900010073797a30000000000900030073797a3200000000080007006e617400140004800800014000000000080002400000000014000000020a010800000000060000000000000014000000110001"], 0xa4}}, 0x0) 648.944451ms ago: executing program 3 (id=2796): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000340)={r0}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000480)="d8001c00180081064e81f7050044fd56170d12a0b9b54570", 0x18}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e3, &(0x7f0000000180)={r0, r1}) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="0e00010002"], 0x8) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r5, &(0x7f0000000200)=0xffffffffffffffff, 0x12) mmap$xdp(&(0x7f0000001000/0x2000)=nil, 0x2000, 0xf, 0x11, r4, 0x100000000) ioctl$FS_IOC_RESVSP(r5, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9ffffc}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000003, 0x12, r4, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x520, 0x320, 0x18c, 0x203, 0x0, 0x19030000, 0x450, 0x2e0, 0x2e0, 0x450, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8, 0x2000000}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {0x0, 0x10}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x10}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}, @inet=@rpfilter={{0x28}, {0xd}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x5, 0x4}, {0x0, 0x6, 0x2}, {0xffffffffffffffff, 0x1, 0x4}, 0x9, 0x80}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x580) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f00000023c0)}, 0x20001) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x134}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff0008000340000000384c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000200003801c0000800800034000000002100002800c000280080001800000000014000000020a01"], 0xf4}}, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000d80)=ANY=[@ANYRESHEX=r10, @ANYRESHEX=r4, @ANYRES32, @ANYBLOB, @ANYBLOB="050053000100000008000500f1b9e300"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) 524.508476ms ago: executing program 2 (id=2797): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000890900000000000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc, '\x00', 0x0, 0x0, r0}, 0x94) 448.837292ms ago: executing program 1 (id=2798): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) r2 = socket$kcm(0x10, 0x2, 0x10) r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r4, 0x84, 0x71, &(0x7f0000000000)="03040000008002ff", 0x8) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000), 0x8) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000000), 0x8) r8 = socket$xdp(0x2c, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = getuid() sendmsg$nl_generic(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x124, 0x2e, 0x9, 0x70fd27, 0xfffffffe, {0x7}, [@typed={0x8, 0x29, 0x0, 0x0, @uid=r10}, @nested={0x10, 0x67, 0x0, 0x1, [@typed={0xc, 0x2a, 0x0, 0x0, @u64=0x9}]}, @generic="cae9f2fd6e7c8e9c58ed16c840d3a488b87c2d463b84240f3b966c85dd08ca237552513275d56c1bd5649a0fa14a41d58379e38bec18df1927889ee72b8b9d97a48448907f9dfe4789229f165e7006477d4e72fe755805f70c63b7322c2a0ec43b06108e47715f09", @typed={0x8, 0x61, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x17}}, @generic="cd74cf65a3621833fbc7ea861a405650c12366a982a17ebbc4de90e578250097a4cf6763f89500a0fa4da6088d967b4e16a7df5b2fdd1185f367a3b9225015f6690f856797c46472e05552b3e1c1537081c3659c8f33c025934a7c74c3db0efb2ac217db31e747643e94d5ce3e780104debe36d4", @typed={0xc, 0x1e, 0x0, 0x0, @u64}, @typed={0x8, 0x4, 0x0, 0x0, @uid=r10}]}, 0x124}, 0x1, 0x0, 0x0, 0x8004}, 0x8010) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x33e000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r8, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r8, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000097000000000000000000001818110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007baaf8fe00000000bfa200000000000007020000f8fdffffb703000000000000b704000000000000b5001c008200000018120000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000014000000b7030000f8ffffff8500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000070000008200000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = socket(0xa, 0x3, 0x3) setsockopt$inet6_IPV6_RTHDR(r12, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x29}, 0x8) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000340)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r8, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r8, &(0x7f0000000100)={0x2c, 0x0, r13}, 0x10) bind$xdp(r3, &(0x7f0000000280)={0x2c, 0x1, r1, 0x2000000, r8}, 0x10) 445.865986ms ago: executing program 4 (id=2799): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41100}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x7}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pselect6(0x40, &(0x7f0000000100)={0x1fe, 0x0, 0x0, 0x0, 0x800, 0x0, 0x8000100ffffe}, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x96, &(0x7f0000000040)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "e4d700", 0x60, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @empty, @mcast2, [@srh={0x3a, 0x4, 0x4, 0x2, 0x7e, 0x10, 0x28a5, [@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}], "ef9edaaa64947bfe"}}}}}}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000c40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x109, [{0x4, 0x1, 0x1}]}]}, {0x0, [0x30, 0x0, 0x0, 0x2e]}}, &(0x7f0000000f40)=""/4079, 0x36, 0xfef, 0x8}, 0x28) 386.459126ms ago: executing program 2 (id=2800): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'wg0\x00', {0x3}, 0x9}) sendto$inet(r0, &(0x7f0000000040)="6a8b7db2673fd93e474a3ea938ff0c9b62e393ea81c8dd354e11cba50c957424068e6eaa768b312a0084ab3cfbf05deaeee02f4d90091c648974f5eba08577bab71a3016f92b773dd7cb9300a092b56d271b69d16d8bb58f4842c276c1", 0x5d, 0x40, &(0x7f00000000c0)={0x2, 0x4e20, @loopback}, 0x10) r1 = epoll_create1(0x80000) setsockopt$inet_buf(r0, 0x0, 0x27, &(0x7f0000000100)="5251ba47a9ca1d89a19bfa3bb7d15b1b77db05ea64ec4a27891ae28e8d7c3c006980dadcced73ed1d8c203c8b6049d43e6e3ccbaecf12db5bb6d03122d456689c9e0e032c974b3a929126728aa37e5f97bf0701a6b0084df13e4d1e2edca558167da45cde4835ec7d1944159ff029fd7c1d638c602946f9ac5e919ad0764b7716df43cf5ec9970f3b97bef8c4a3ad23d0cbcde78b65662ccb105dbb6139165640103a89452271a4fcb7f1b981f4124972c8b223ac1ddc5129897915174f9fadb8dfc46e3dc78b3abda9effa953a66e6f7649312e16473c44f421b6be3c07de76e02256cdd77a033fe4", 0xe9) (async) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000200)={{{@in=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@private0}}, &(0x7f0000000300)=0xe8) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000340)={0x1f, 0x3, 0x3}, 0x6) (async) r4 = socket$igmp(0x2, 0x3, 0x2) clock_gettime(0x0, &(0x7f0000001640)={0x0, 0x0}) recvmmsg(r4, &(0x7f00000015c0)=[{{&(0x7f0000000380)=@nl=@proc, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000400)=""/95, 0x5f}, {&(0x7f0000000480)=""/32, 0x20}], 0x2, &(0x7f0000000500)=""/4096, 0x1000}, 0x10}, {{&(0x7f0000001500)=@nfc, 0x80, &(0x7f0000001580)}, 0x8}], 0x2, 0x1, &(0x7f0000001680)={r5, r6+60000000}) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f00000017c0)={r1, &(0x7f00000016c0)='wg0\x00', 0x115002, &(0x7f0000001700)={@_ha_fsid={[0x9, 0x9]}, {0x6, 0xfe01, 0x7a, 0x1}}, 0x4755, &(0x7f0000001740), &(0x7f0000001780)=0x200}) sendmsg$NL80211_CMD_DISASSOCIATE(r7, &(0x7f0000001900)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001840)={0x58, 0x0, 0x4, 0x629bb0dd, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x5}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3861}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_SSID={0x4}, @NL80211_ATTR_IE={0x16, 0x2a, [@mic={0x8c, 0x10, {0x5d7, "219d811ce851", @short="d0a9b83da0e44413"}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4048055}, 0x20000090) (async) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000001940)={0x1, 0xab, 0x9}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000001980)={"03b75dff41725572e75519cdfa85bd03", 0x0, 0x0, {0x8000, 0xd03}, {0x9, 0x4}, 0xb0, [0x2, 0x0, 0x2, 0x0, 0xfffffffffffffffa, 0x6e, 0x0, 0x1000, 0x1, 0x7f, 0x100000001, 0x8001, 0x2, 0x8, 0x8, 0x100]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000001a80)={"ae27062028151a7ee4957cea67c15df1", r8, 0x0, {0x4, 0x7}, {0x3, 0xfffffff9}, 0x5, [0x779, 0x1, 0x8, 0x3, 0x6, 0x5, 0x5, 0x4, 0x5, 0x9, 0x7, 0x4, 0x48000000, 0xa04e, 0x8, 0x9]}) bind$inet(r7, &(0x7f0000001b80)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001c00), r7) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000001c40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_OCB(r7, &(0x7f0000001d00)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c80)={0x28, r9, 0x2, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x1, 0x21}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4) (async) r11 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r11, 0x107, 0x1, &(0x7f0000001d40)={r2, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}}, 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000001d80)={r1, 0x1, 0x9, 0x1}) (async, rerun: 32) r13 = getuid() sendmsg$nl_generic(r12, &(0x7f0000002240)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002200)={&(0x7f0000001e00)={0x3e8, 0x1e, 0x100, 0x70bd29, 0x25dfdbfc, {0x1}, [@nested={0x186, 0x146, 0x0, 0x1, [@generic="4967e8b0a20290c2dcd69a6296161db112c664f21a2c53616f5808d2f77ec69651dc4babc52ad84244e604125c60ca2a13f970c5791ebd6c6c74c55371017621a94f220666ca1e49621642cb35d754f0a4d90ba4359cfb39c2b80b816ad8c9a623892d0c6c7af820b68fe2cb38cba76d265f7d5e09754801bd6da7f1210fad8ffc8d496fe9ba8e1d98a857e5588d1946074afa944ffb4be243fdc5d437b93addc3672ae67c83299066d4eeb3fcde5f90ab9e0f963ce0f384014cd169b0539847cd28cc26710f5314372cfd2761a2a29213", @typed={0x8, 0x113, 0x0, 0x0, @fd=r1}, @generic="4dccf26d3322575e177c39ff522272b4987dd5112b1ad92a2fc4f9e9b835adcfd47690a4867c6f5ca3be67badd85719d3dea85ded37632f0ab277eddfa2db25d88e65d84a4a29a882c7075fbfae448ffdae1a54d4994074ddf2b800bf057d32d2a23f7f428e55f158ead30fe9a064c122713d6a04f36a29c13440ff175e23e2716ccf4ca16c2e495dd2e5a864c9e9188ce02ed7475", @typed={0x14, 0x148, 0x0, 0x0, @ipv6=@empty}]}, @nested={0x3a, 0xab, 0x0, 0x1, [@nested={0x4, 0x14}, @nested={0x4, 0x37}, @generic="455fc2e58627d09751abc7eb78cd0bb051c6d86b191a8b3e6be62c104c82192ccdb02d5e08ce52623648e4eadaec"]}, @generic="3b9504e14b6b807237d48caaf1b10b723ceb182545d5b5be77ba7d7ccc", @nested={0xc9, 0xc1, 0x0, 0x1, [@nested={0x4, 0xb5}, @typed={0x8, 0x167, 0x0, 0x0, @u32=0x2}, @generic="eb52e140b1b97677b6b0a36c5a4a7fc55014ffb1758c06128f7c53d8f3e2864a462d042eb1d3e21d37ec22d6e19d34720698ccfd0769cffa2fc7fe3e50328e5ce322ad8aa9ecbe00496901055e3b44d651962fe9c47391ad13c0e189f4845f8ee3788de05e4d3e9f17ede0ce0b1ba62867e7c13aaf65bb62abefd4c7e98738952aa1d5348e498b018586b62ab5e39479f8e37b66aac963bb52cf8cce510120f04de18e9324447479d6b04437748f638dfcd98e1e315b30a829"]}, @nested={0x86, 0xf9, 0x0, 0x1, [@typed={0x4, 0x1b}, @generic="59dcf2eebf15a98c1ac368bb551a0d276bd5c84baa4cc4d50362839bd30cd7535189294a9bc124ec55e014068262a8207efb7169a45fb5a32b2351ff5d0f49e31453dc9d717d625a9de1f21ea8ae5d71a6f98cd74504f9fedeaad940dcedbc4766b11cbf9ad2e241db0e5ca28de6", @typed={0x8, 0xf2, 0x0, 0x0, @u32}, @typed={0x8, 0x83, 0x0, 0x0, @uid=r13}]}, @generic="2da7e246edf61960d9fc727956920ab82ed84a1b77399d04c5838e85a752b5abd5dd802e9e98cac61c2bc6d2a10fb07031c1", @typed={0x1f, 0x121, 0x0, 0x0, @binary="e37c07994869e9de4141203089d689e317f163715dcf5aeaddb7b7"}, @generic="11005448b376281163d4ae6c0b570a8821eebf1f55c9303e631abf56675453063c36c7056bd400d6eee3d7e9b8aa0213ae06b400d987", @typed={0x14, 0x39, 0x0, 0x0, @ipv6=@local}]}, 0x3e8}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendmsg$NL80211_CMD_SET_STATION(r12, &(0x7f0000002400)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000023c0)={&(0x7f00000022c0)={0xc4, r9, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x180000, 0x7b}}}}, [@NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x8}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x7}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x64, 0xac, "011869d1f874e4c36f9f0932b9f26bb52c832a06fc41c945395f57c9ac4d5cc658f1bd4a1dc6561fd308be2fb2c63eef2ab589d997c55b8b56cd392c53c747692864efd37133eb527b712455ff90643aafa448e3e62a80aa40dc1b18374b7d46"}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x2d2}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x4}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r10}]}, 0xc4}, 0x1, 0x0, 0x0, 0x48000}, 0x8010) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000002440)={0x0, 0x0, {}, {0x0, @usage, 0x0}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r7, 0xc4089434, &(0x7f0000002840)={r14, 0x7, 0x0, [0x7, 0x3, 0x100000000, 0x8000000000000000, 0x3], [0xfffffffffffffffc, 0xfffffffffffffffc, 0x7fff, 0xff, 0x0, 0x1, 0x1ff, 0x3, 0xe99, 0x9, 0x3edd3792, 0x4c, 0x2, 0x3, 0x6, 0x0, 0x8, 0x3, 0xb, 0x7, 0x7, 0x9, 0x3, 0x80000001, 0x4, 0x1, 0x6, 0x6, 0x80000000, 0x8dd2, 0x4, 0xffffffffffffff08, 0x0, 0x7, 0xe57e, 0x10000, 0xed, 0x1, 0x200, 0xa74, 0x2a, 0x1a5, 0x1940000000000000, 0x4, 0x3, 0x1, 0x1, 0x2, 0x3, 0x7ebf, 0x28, 0x8, 0x4, 0x5, 0x641, 0x9, 0x1, 0xc151, 0x46, 0x4, 0x4, 0x7fff, 0x3, 0x1, 0x2, 0x9, 0x65, 0x0, 0xa, 0x5, 0xfffffffffffffff9, 0x1, 0x3ff, 0x4, 0xffff, 0x6, 0x0, 0xeef, 0x100, 0xffffffff, 0x4a, 0x9, 0xfffffffffffffff7, 0x2, 0x0, 0xc, 0x8, 0x100000001, 0x1, 0x10001, 0x7fffffff, 0x7, 0x4, 0x4, 0x8, 0x3, 0xc, 0x1, 0xfffffffffffffff9, 0x4, 0x2, 0x9, 0x401, 0x7, 0x3, 0x10000, 0x6, 0x7f1c, 0xc, 0x55, 0x0, 0x23, 0xffffffffffff3ce2, 0x2, 0x7ff, 0xfffffffffffffff9, 0x8, 0x4, 0x0, 0x6, 0x1]}) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000002e40)={@map=r12, 0xffffffffffffffff, 0x26, 0x20, r12}, 0x20) 365.964536ms ago: executing program 3 (id=2801): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x1, @link_local, 'vcan0\x00'}}, 0x1e) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x14, &(0x7f0000000140)=ANY=[@ANYRES8=r0, @ANYRES32=r1, @ANYRES32, @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000010000008500000086000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x8, 0x8, &(0x7f00000002c0)="b800000580000000", &(0x7f0000000200)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000080)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x2000000002000002) (async) socket$inet6_sctp(0xa, 0x1, 0x84) unshare(0x6020400) (async) r5 = gettid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff66510000000000000000001afbc2d27438e23a475a80db8a00000000001801000020646c250000b42163c6bbe36fec000058abd8195429c08f60ebe53d70000000"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="61a49c985aff4ef734bb256609e1e382f60a826ecafdc827d847702e53769c1b5dff702a00727eb2123ead72359465fca1a54e83d9f7327c42f68c878bcd5afdb0d37f"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r7 = syz_open_procfs$namespace(r5, &(0x7f0000000040)='ns/cgroup\x00') unshare(0x2020000) close(r7) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000100)={0x0, 0x1, 0x3}) (async) r8 = syz_init_net_socket$llc(0x1a, 0x545d6d024f14d031, 0x0) (async) r9 = epoll_create1(0x80000) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r11, &(0x7f0000000300), 0x0, 0x0) (async) recvmmsg(r10, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) bind$unix(r11, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) (async) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r11, &(0x7f0000000100)={0x20000014}) (async) epoll_wait(r9, &(0x7f0000000040)=[{}], 0x1, 0x400) accept4$llc(r8, 0x0, &(0x7f0000000000), 0x0) 241.453743ms ago: executing program 2 (id=2802): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710425000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) pipe(&(0x7f0000000000)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), r1) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000280), 0xc, &(0x7f0000000d80)={&(0x7f0000000bc0)={0x14, 0x0, 0x8, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x4000884) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r4, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r6, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r6, 0x1000) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0xfffff000) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r5, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000540)={0x1100, 0x1, 0x2e38, 0x11000}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0x0, 0x5, 0x8}, 0xc) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="090000000400000006000000ff00000042"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000080), 0x619, r7}, 0x38) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x1}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0xfffffffa, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x1}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0f000000000000000000bb60202d32a3d7e400080000697e009fec0d0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000000000000400"/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0xb1a6, 0x7, 0x1000, 0x3, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x2, 0x6}, 0x50) pipe(&(0x7f00000004c0)) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000540)=@generic={&(0x7f0000000500)='./file0\x00'}, 0x18) 198.321642ms ago: executing program 0 (id=2803): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x5, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x2, 0x2}]}, @ptr={0x0, 0x0, 0x0, 0x2, 0x5}]}, {0x0, [0x0, 0x5f, 0x30]}}, 0x0, 0x3d, 0x0, 0x1}, 0x28) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_tracing={0x1a, 0x8, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x4ce}, [@alu={0x7, 0x0, 0x0, 0x2, 0x5, 0x50}, @call={0x85, 0x0, 0x0, 0x2d}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x3, 0x5, 0x9, 0xc, 0xfffffffffffffffc}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0xc8, &(0x7f00000000c0)=""/200, 0x41000, 0x28, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x5, 0x7, 0x5}, 0x10, 0x98cb, 0xffffffffffffffff, 0x2, &(0x7f0000000240)=[0x1], &(0x7f00000002c0)=[{0x4, 0x4, 0x7, 0x6}, {0x3, 0x1, 0x1, 0x4}], 0x10, 0xa}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000400)={r0, r1}, 0xc) 151.515856ms ago: executing program 2 (id=2804): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x2, 0x0, @empty, 0x30}, 0x1c) listen(r0, 0x2) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r2, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r2, &(0x7f0000000f80)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000000700)=0x7, 0x4) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, 0x0, &(0x7f0000000040)=0x56) sendmsg$tipc(r2, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x4000000) setsockopt$sock_attach_bpf(r1, 0x1, 0x21, &(0x7f00000001c0), 0x4) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0c1}, 0x1) recvmsg(r1, 0x0, 0x1) recvmsg(r1, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000900)=""/203, 0xcb}], 0x1, &(0x7f0000000cc0)=""/221, 0xdd}, 0x100) sendmsg(r1, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000080)=0x1, 0x4) sendto$inet6(r4, &(0x7f0000000240)="c4", 0xfffffffffffffedf, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @rand_addr, 0x5}, 0x1c) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) r6 = socket$netlink(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000006800)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="15060000f2ff01000000010000003000018014000400ff010000000000000000000000000001060005004e220000060001000a000000080006000100"], 0x44}, 0x5}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r8, &(0x7f000000d040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x20, r5, 0x8de13c6b70ae92c3, 0x41003, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4050) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r3, &(0x7f0000000340)={&(0x7f0000000180), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r5, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x89cfd1d0a0512e26}, 0x4000004) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1a, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000bc0000009500000000040000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @tracing=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000240)=@generic={&(0x7f0000000200)='./file0\x00', r10}, 0x18) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) 817.863µs ago: executing program 3 (id=2805): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x40107446, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43afffe800000000000000000000000000010ff020000000000000000000000000001"], 0x340a) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x44, 0x18, 0x1, 0x70bdac, 0x25dfdbfc, {0xa}, [@TCA_ACT_TAB={0x30, 0x1, [{0xc, 0x8d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x44010}, 0x20040844) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x33fe0) 0s ago: executing program 0 (id=2806): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001000000327bd7000fbdbdf2500000000", @ANYBLOB="320a0500230800001000128008000100767469000400029a080004"], 0x38}, 0x1, 0x0, 0x0, 0x4000080}, 0x4010) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01400010000600000000067400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a733000080002000000e6ff05000700263a3a0914000600626f6e64300000000000000001000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x4) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r4, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x200000c, 0x11, r4, 0xaa0f4000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) mmap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x2000004, 0x12, r6, 0xe6905000) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r5, 0x1000) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0xfffff000) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x7) mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0x13, r3, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$inet(r7, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x4c, &(0x7f0000000000), 0x4) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r2, 0x0) mmap(&(0x7f0000071000/0x4000)=nil, 0x4000, 0x0, 0x13, r3, 0x0) mmap(&(0x7f000015b000/0x3000)=nil, 0x3000, 0x800001, 0x10012, r3, 0x0) mmap(&(0x7f000086a000/0x2000)=nil, 0x2000, 0x4, 0x11, r2, 0x2000) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 4 bytes leftover after parsing attributes in process `syz.3.1078'. [ 240.816322][T10356] lo: Caught tx_queue_len zero misconfig [ 240.831203][T10356] netlink: 'syz.2.1081': attribute type 5 has an invalid length. [ 241.406049][T10378] xt_hashlimit: size too large, truncated to 1048576 [ 241.466000][T10375] netlink: 'syz.4.1085': attribute type 20 has an invalid length. [ 241.497589][T10375] netlink: 'syz.4.1085': attribute type 21 has an invalid length. [ 241.582268][T10385] geneve3: entered promiscuous mode [ 241.604847][ T697] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.646398][ T697] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.674125][ T697] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.710660][ T697] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.887556][T10397] syzkaller0: entered promiscuous mode [ 241.902848][T10397] syzkaller0: entered allmulticast mode [ 242.272544][T10417] bridge7: entered promiscuous mode [ 242.779717][T10441] xt_hashlimit: size too large, truncated to 1048576 [ 243.033513][T10454] pim6reg: entered allmulticast mode [ 243.120817][T10461] __nla_validate_parse: 11 callbacks suppressed [ 243.120838][T10461] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1108'. [ 243.342769][T10468] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode [ 243.350278][T10468] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode [ 243.809540][ T30] audit: type=1804 audit(1780571596.798:4): pid=10494 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1114" name="/newroot/223/cgroup.controllers" dev="tmpfs" ino=1157 res=1 errno=0 [ 243.872727][ T30] audit: type=1800 audit(1780571596.798:5): pid=10494 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1114" name="cgroup.controllers" dev="tmpfs" ino=1157 res=0 errno=0 [ 244.128633][T10497] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1116'. [ 244.473823][T10504] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1117'. [ 244.634534][T10517] xt_hashlimit: size too large, truncated to 1048576 [ 245.059481][T10529] validate_nla: 2 callbacks suppressed [ 245.059527][T10529] netlink: 'syz.0.1126': attribute type 1 has an invalid length. [ 245.188129][T10529] 8021q: adding VLAN 0 to HW filter on device bond3 [ 245.204869][T10533] vlan1: entered allmulticast mode [ 245.210190][T10533] bond3: entered allmulticast mode [ 245.340294][T10541] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 245.428333][T10546] batadv0: entered promiscuous mode [ 245.888421][T10570] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input11 [ 247.260877][ T5648] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 248.229125][T10571] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.315959][T10599] netlink: 'syz.1.1144': attribute type 1 has an invalid length. [ 248.325700][T10599] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1144'. [ 248.342340][T10599] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1144'. [ 248.371386][T10599] netlink: 658 bytes leftover after parsing attributes in process `syz.1.1144'. [ 248.528978][T10610] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1147'. [ 248.877139][T10626] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1151'. [ 248.934924][T10630] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input12 [ 248.985935][T10632] hmac(sha2: entered promiscuous mode [ 249.396336][T10653] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1159'. [ 249.677547][T10671] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1164'. [ 250.187903][T10688] Bluetooth: MGMT ver 1.23 [ 250.278778][T10693] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1170'. [ 250.359698][T10693] vlan0: entered promiscuous mode [ 250.763288][T10713] trusted_key: syz.2.1174 sent an empty control message without MSG_MORE. [ 250.841816][T10718] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1178'. [ 250.855577][T10717] netlink: 120 bytes leftover after parsing attributes in process `syz.4.1178'. [ 251.063189][T10731] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 251.398423][T10734] syzkaller1: entered promiscuous mode [ 251.404215][T10734] syzkaller1: entered allmulticast mode [ 251.600387][T10760] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 251.738432][T10762] pimreg: entered allmulticast mode [ 251.863793][T10761] pimreg: left allmulticast mode [ 252.013272][T10781] v: renamed from gretap0 (while UP) [ 252.020415][T10781] A link change request failed with some changes committed already. Interface v may have been left with an inconsistent configuration, please check. [ 252.253630][T10784] netlink: 'syz.1.1191': attribute type 1 has an invalid length. [ 252.443831][T10805] netlink: 'syz.0.1198': attribute type 1 has an invalid length. [ 252.510029][T10806] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 252.609768][T10805] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 252.618640][T10811] netlink: 'syz.4.1201': attribute type 13 has an invalid length. [ 254.169898][T10882] netlink: 'syz.1.1214': attribute type 1 has an invalid length. [ 254.419805][T10890] __nla_validate_parse: 16 callbacks suppressed [ 254.419825][T10890] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1217'. [ 254.487233][T10889] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1217'. [ 254.551534][T10901] netlink: 'syz.4.1218': attribute type 1 has an invalid length. [ 254.910511][T10915] macvlan2: entered promiscuous mode [ 254.926864][T10915] macvlan2: entered allmulticast mode [ 254.936094][T10915] bond6: entered promiscuous mode [ 254.944927][T10915] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 254.959194][T10915] bond6: left promiscuous mode [ 255.461298][T10948] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1227'. [ 255.557262][T10948] bond7: option ad_actor_sys_prio: invalid value (0) [ 255.569985][T10948] bond7: option ad_actor_sys_prio: allowed values 1 - 65535 [ 255.595354][T10948] bond7 (unregistering): Released all slaves [ 255.976293][T10967] gretap0: refused to change device tx_queue_len [ 256.008767][T10967] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 256.060885][T10972] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1233'. [ 256.121493][T10972] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1233'. [ 256.133189][T10972] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1233'. [ 256.283348][T10975] bridge_slave_1: entered promiscuous mode [ 256.465439][T10981] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1236'. [ 256.599511][T10986] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1238'. [ 256.643731][T10989] netlink: 'syz.2.1240': attribute type 1 has an invalid length. [ 256.703753][T10993] vlan2: entered promiscuous mode [ 256.781578][T10994] netlink: 'syz.1.1237': attribute type 4 has an invalid length. [ 256.815304][T10996] netlink: 'syz.2.1240': attribute type 1 has an invalid length. [ 256.832803][T10993] netlink: 'syz.1.1237': attribute type 3 has an invalid length. [ 257.139002][T11008] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1243'. [ 257.213946][T11008] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1243'. [ 259.994497][T11001] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 260.239052][T11027] sctp: [Deprecated]: syz.4.1251 (pid 11027) Use of int in max_burst socket option. [ 260.239052][T11027] Use struct sctp_assoc_value instead [ 260.324592][T11027] netlink: 'syz.4.1251': attribute type 1 has an invalid length. [ 260.356846][T11027] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1251'. [ 260.488945][T11044] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input13 [ 260.706181][T11057] netlink: 'syz.3.1257': attribute type 1 has an invalid length. [ 260.876289][T11061] bond5: (slave bridge3): making interface the new active one [ 260.885111][T11061] bond5: (slave bridge3): Enslaving as an active interface with an up link [ 261.008790][T11064] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 261.207886][T11078] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1261'. [ 261.384746][T11083] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1262'. [ 261.408529][T11086] netlink: 'syz.3.1264': attribute type 13 has an invalid length. [ 261.492569][T11092] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1263'. [ 261.506691][T11092] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1263'. [ 263.665285][T11113] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1270'. [ 263.962284][T11126] netlink: 'syz.2.1273': attribute type 4 has an invalid length. [ 264.097117][T11139] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1278'. [ 264.684392][T11160] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1284'. [ 264.709327][T11162] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1284'. [ 265.143672][T11171] syzkaller0: entered promiscuous mode [ 265.155934][T11171] syzkaller0: entered allmulticast mode [ 265.199669][T11171] tipc: Enabled bearer , priority 0 [ 265.238919][T11171] tipc: Resetting bearer [ 265.277867][T11178] netlink: 212344 bytes leftover after parsing attributes in process `syz.4.1288'. [ 265.289188][T11170] tipc: Resetting bearer [ 265.398859][T11170] tipc: Disabling bearer [ 265.524833][T11185] netlink: 388 bytes leftover after parsing attributes in process `syz.1.1289'. [ 265.578859][T11178] veth15: entered promiscuous mode [ 265.691703][T11178] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1288'. [ 266.033991][T11212] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1295'. [ 266.611765][T11198] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 266.626524][T11198] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 266.639160][T11198] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 266.649035][T11210] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1293'. [ 266.696663][T11209] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 266.716468][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 266.773209][ T9262] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.780516][ T9262] bridge0: port 2(bridge_slave_1) entered forwarding state [ 266.897461][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 267.143972][T11242] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input14 [ 267.934897][T11289] netlink: 'syz.2.1315': attribute type 2 has an invalid length. [ 268.065354][T11293] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input15 [ 268.218962][T11303] batadv_slave_0: Caught tx_queue_len zero misconfig [ 268.525205][T11305] xt_CT: No such helper "snmp_trap" [ 268.820174][T11328] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1326'. [ 268.837914][T11328] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1326'. [ 268.858024][T11326] netlink: 'syz.0.1325': attribute type 40 has an invalid length. [ 268.917264][T11326] tipc: Enabling of bearer rejected, failed to enable media [ 268.992055][T11332] netlink: 'syz.2.1326': attribute type 1 has an invalid length. [ 269.027130][T11332] netlink: 'syz.2.1326': attribute type 2 has an invalid length. [ 269.044925][T11331] netlink: 'syz.3.1327': attribute type 4 has an invalid length. [ 269.059251][T11332] netlink: 'syz.2.1326': attribute type 3 has an invalid length. [ 269.137185][T11337] netlink: 'syz.3.1327': attribute type 4 has an invalid length. [ 269.359772][T11345] xfrm0: entered allmulticast mode [ 269.378031][T11345] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 269.533036][T11349] xt_hashlimit: size too large, truncated to 1048576 [ 269.576050][T11351] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input16 [ 270.019605][T11365] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1336'. [ 270.087505][T11365] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1336'. [ 270.346109][T11381] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1341'. [ 270.494954][T11390] xt_CT: You must specify a L4 protocol and not use inversions on it [ 270.582569][T11390] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1342'. [ 270.791075][T11412] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input17 [ 270.806991][T11413] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1347'. [ 270.830330][T11413] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1347'. [ 270.893230][T11413] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1347'. [ 270.922923][T11413] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1347'. [ 270.945616][T11413] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1347'. [ 270.955241][T11413] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1347'. [ 270.964715][T11413] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1347'. [ 270.974334][T11413] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1347'. [ 270.985113][T11413] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1347'. [ 271.324695][T11435] netlink: 'syz.4.1352': attribute type 10 has an invalid length. [ 272.260191][T11468] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input18 [ 272.301171][T11475] bond0: Caught tx_queue_len zero misconfig [ 272.573084][T11450] netlink: 'syz.1.1357': attribute type 9 has an invalid length. [ 272.938761][T11500] netlink: 'syz.3.1370': attribute type 1 has an invalid length. [ 273.054733][T11508] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 273.158376][T11500] 8021q: adding VLAN 0 to HW filter on device bond6 [ 273.268736][T11511] netlink: 'syz.4.1371': attribute type 32 has an invalid length. [ 273.509358][T11522] xt_hashlimit: size too large, truncated to 1048576 [ 273.633063][T11524] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input19 [ 274.054946][T11540] erspan1: entered allmulticast mode [ 274.255139][T11548] block nbd2: Unsupported socket: should be TCP or UNIX. [ 274.389420][T11557] netlink: 'syz.4.1382': attribute type 21 has an invalid length. [ 274.637246][T11564] 8021q: adding VLAN 0 to HW filter on device bond7 [ 275.147168][T11557] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 275.411698][T11593] netlink: 'syz.4.1390': attribute type 142 has an invalid length. [ 275.658642][T11597] xt_hashlimit: size too large, truncated to 1048576 [ 275.785430][T11602] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input20 [ 275.826929][T11599] bond8: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 275.989535][T11599] bond8 (unregistering): Released all slaves [ 276.365357][T11622] tipc: Enabling of bearer rejected, failed to enable media [ 276.392658][T11621] __nla_validate_parse: 99 callbacks suppressed [ 276.392676][T11621] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1396'. [ 276.476129][T11631] bridge12: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 276.724116][T11642] netlink: 'syz.1.1404': attribute type 83 has an invalid length. [ 276.727300][T11640] netlink: 27 bytes leftover after parsing attributes in process `syz.2.1402'. [ 276.752955][T11642] netlink: 'syz.1.1404': attribute type 1 has an invalid length. [ 276.787466][T11647] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1403'. [ 276.856795][T11653] netlink: 'syz.2.1402': attribute type 29 has an invalid length. [ 276.865010][T11642] 8021q: adding VLAN 0 to HW filter on device bond1 [ 276.889647][T11656] netlink: 'syz.0.1405': attribute type 4 has an invalid length. [ 276.919212][T11656] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1405'. [ 276.939848][T11640] netlink: 'syz.2.1402': attribute type 1 has an invalid length. [ 276.970085][T11640] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1402'. [ 276.983603][T11652] bond1: (slave ip6gretap1): making interface the new active one [ 277.025048][T11652] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 277.211994][T11658] block nbd2: server does not support multiple connections per device. [ 277.223536][T11665] xt_hashlimit: size too large, truncated to 1048576 [ 277.240264][T11667] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1408'. [ 277.260395][T11658] block nbd2: shutting down sockets [ 277.277893][T11667] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1408'. [ 277.325315][T11669] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input21 [ 277.343812][T11658] netlink: 'syz.4.1406': attribute type 1 has an invalid length. [ 277.370784][T11658] netlink: 'syz.4.1406': attribute type 2 has an invalid length. [ 277.418882][T11658] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1406'. [ 277.552537][T11680] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 277.591226][T11680] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 277.641124][T11676] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1412'. [ 277.680004][T11679] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1412'. [ 277.914452][T11660] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 277.938287][T11660] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 278.107710][T11660] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 278.122857][T11660] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 278.205347][T11660] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 278.222587][T11660] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 278.270280][T11660] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 278.281038][T11660] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 278.540861][T11721] x_tables: duplicate underflow at hook 2 [ 278.571414][T11726] netlink: 'syz.0.1423': attribute type 23 has an invalid length. [ 278.625568][T11726] netlink: 'syz.0.1423': attribute type 21 has an invalid length. [ 278.666632][T11726] IPv6: NLM_F_CREATE should be specified when creating new route [ 279.796881][T11750] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 281.360364][T11798] netlink: 'syz.1.1445': attribute type 4 has an invalid length. [ 281.395341][T11798] netlink: 'syz.1.1445': attribute type 4 has an invalid length. [ 281.893866][T11820] __nla_validate_parse: 10 callbacks suppressed [ 281.893887][T11820] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1452'. [ 281.916828][T11822] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1449'. [ 281.937109][T11819] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1451'. [ 281.966992][ T5890] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 281.986046][ T5890] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 282.012350][ T5890] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 282.101140][ T5890] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 282.343278][T11842] x_tables: ip_tables: socket.0 match: invalid size 0 (kernel) != (user) 8 [ 282.456519][T11848] netlink: 34 bytes leftover after parsing attributes in process `syz.2.1457'. [ 282.790528][T11861] macsec2: entered allmulticast mode [ 282.796145][T11861] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 282.804598][T11861] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 282.817611][T11861] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 282.953123][T11861] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 283.079646][ T5743] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 283.216315][T11872] syzkaller1: entered promiscuous mode [ 283.223153][T11872] syzkaller1: entered allmulticast mode [ 283.255747][T11873] sch_tbf: burst 1023 is lower than device lo mtu (11337746) ! [ 283.504751][T11885] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1466'. [ 283.508673][T11880] bond7: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 283.524993][T11885] nbd: must specify at least one socket [ 283.636938][T11880] bond7 (unregistering): Released all slaves [ 284.104333][T11913] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1475'. [ 284.144410][T11908] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 284.192412][T11917] netlink: 'syz.1.1476': attribute type 11 has an invalid length. [ 284.219159][T11917] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1476'. [ 284.239145][T11917] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1476'. [ 284.249468][T11917] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1476'. [ 284.258685][T11917] netlink: 'syz.1.1476': attribute type 12 has an invalid length. [ 284.668587][T11941] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1479'. [ 284.951332][T11949] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 285.152213][T11961] netlink: 'syz.2.1484': attribute type 1 has an invalid length. [ 285.276314][T11961] bond8: entered promiscuous mode [ 285.290969][T11961] 8021q: adding VLAN 0 to HW filter on device bond8 [ 285.510269][T11981] netlink: 'syz.0.1487': attribute type 4 has an invalid length. [ 285.525707][T11964] can: request_module (can-proto-0) failed. [ 285.569036][T11974] bond7 (unregistering): Released all slaves [ 285.590560][T11984] netlink: 'syz.0.1487': attribute type 4 has an invalid length. [ 285.716072][T11964] bond8: (slave bridge6): making interface the new active one [ 285.733152][T11964] bridge6: entered promiscuous mode [ 285.751036][T11964] bond8: (slave bridge6): Enslaving as an active interface with an up link [ 285.828181][T11981] nbd: socks must be embedded in a SOCK_ITEM attr [ 285.857949][T11981] block nbd2: shutting down sockets [ 285.931297][T12001] netlink: 'syz.3.1493': attribute type 1 has an invalid length. [ 286.236657][T12001] bond7: entered promiscuous mode [ 286.266563][T12001] bond7: entered allmulticast mode [ 286.296568][T12001] 8021q: adding VLAN 0 to HW filter on device bond7 [ 286.351748][T12004] bond9: option all_slaves_active: invalid value (127) [ 286.364186][T12004] bond9 (unregistering): Released all slaves [ 286.433529][T12006] macvlan0: entered promiscuous mode [ 286.439235][T12006] macvlan0: entered allmulticast mode [ 286.451425][T12006] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 286.490732][ T9274] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.500405][ T9274] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.703892][ T9274] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.759286][ T9274] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.928979][T12040] netlink: 'syz.0.1495': attribute type 5 has an invalid length. [ 287.014867][T12050] netlink: 'syz.4.1499': attribute type 2 has an invalid length. [ 287.264161][T12066] netlink: 'syz.4.1501': attribute type 5 has an invalid length. [ 287.310316][T12066] netlink: 'syz.4.1501': attribute type 5 has an invalid length. [ 287.550259][T12068] IPVS: Unknown mcast interface: veth1_to_hsr [ 287.777610][T12074] __nla_validate_parse: 4 callbacks suppressed [ 287.777626][T12074] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1504'. [ 288.501278][T12090] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1508'. [ 288.849689][T12098] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1511'. [ 288.901309][T12098] ipip1: entered promiscuous mode [ 288.911431][T12099] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1511'. [ 289.613611][T12128] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1520'. [ 290.118860][T12155] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1528'. [ 290.455675][T12162] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1530'. [ 290.620306][T12163] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1530'. [ 290.817942][T12190] validate_nla: 1 callbacks suppressed [ 290.817961][T12190] netlink: 'syz.1.1537': attribute type 1 has an invalid length. [ 290.990468][T12190] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1537'. [ 291.074815][T12199] bond2: (slave geneve2): making interface the new active one [ 291.093806][T12199] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 291.103644][T12204] syzkaller0: Caught tx_queue_len zero misconfig [ 291.116612][ T9274] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 291.149167][T12190] 8021q: adding VLAN 0 to HW filter on device bond2 [ 291.197463][ T9274] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 291.227403][ T9274] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 291.240251][ T9274] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 291.510553][T12218] netlink: 'syz.3.1543': attribute type 1 has an invalid length. [ 291.548585][T12224] netlink: 'syz.0.1546': attribute type 4 has an invalid length. [ 291.575325][T12224] netlink: 'syz.0.1546': attribute type 4 has an invalid length. [ 291.627466][T12224] netlink: 'syz.0.1546': attribute type 4 has an invalid length. [ 291.633191][T12229] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1547'. [ 291.644722][T12224] netlink: 'syz.0.1546': attribute type 4 has an invalid length. [ 291.669241][T12224] netlink: 'syz.0.1546': attribute type 4 has an invalid length. [ 291.711127][T12224] netlink: 'syz.0.1546': attribute type 4 has an invalid length. [ 291.744504][T12224] netlink: 'syz.0.1546': attribute type 4 has an invalid length. [ 291.773654][T12224] netlink: 'syz.0.1546': attribute type 4 has an invalid length. [ 291.916163][T12233] 8021q: adding VLAN 0 to HW filter on device bond8 [ 292.041263][T12254] TCP: TCP_TX_DELAY enabled [ 292.064582][T12233] bond8: (slave ip6gretap1): making interface the new active one [ 292.075612][T12233] bond8: (slave ip6gretap1): Enslaving as an active interface with an up link [ 292.100847][T12251] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 292.110558][T12251] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 292.915142][T12290] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 293.066200][T12295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 293.093063][T12295] team0: Port device bond0 added [ 293.114343][T12298] syzkaller0: entered promiscuous mode [ 293.124049][T12298] syzkaller0: entered allmulticast mode [ 293.134455][T12296] __nla_validate_parse: 6 callbacks suppressed [ 293.134474][T12296] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1565'. [ 293.175798][T12296] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1565'. [ 293.580073][T12309] openvswitch: netlink: Unexpected mask (mask=20440, allowed=10048) [ 293.928646][T12330] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1572'. [ 294.149442][T12343] sctp: [Deprecated]: syz.1.1578 (pid 12343) Use of int in max_burst socket option. [ 294.149442][T12343] Use struct sctp_assoc_value instead [ 294.180129][T12343] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1578'. [ 294.195329][T12344] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1579'. [ 294.715353][T12360] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1583'. [ 294.849236][T12367] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1585'. [ 295.334097][T12388] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1592'. [ 295.802860][T12405] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1596'. [ 295.842081][T12379] syzkaller1: entered promiscuous mode [ 295.851973][T12379] syzkaller1: entered allmulticast mode [ 297.150263][T12451] lo: Caught tx_queue_len zero misconfig [ 297.156230][T12453] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1608'. [ 297.205018][T12455] validate_nla: 34 callbacks suppressed [ 297.205038][T12455] netlink: 'syz.4.1610': attribute type 10 has an invalid length. [ 297.612812][T12448] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 297.662326][T12448] batman_adv: batadv0: Adding interface: gretap1 [ 297.685086][T12448] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1568 would solve the problem. [ 297.742376][T12448] batman_adv: batadv0: Interface activated: gretap1 [ 298.389695][T12498] lo: Caught tx_queue_len zero misconfig [ 298.459340][T12506] tipc: Enabled bearer , priority 0 [ 298.608376][T12506] tipc: Disabling bearer [ 299.045567][T12534] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 299.241167][T12542] __nla_validate_parse: 2 callbacks suppressed [ 299.241187][T12542] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1623'. [ 299.359168][T12548] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1626'. [ 299.827669][T12569] netlink: 'syz.2.1631': attribute type 3 has an invalid length. [ 299.936643][T12569] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1631'. [ 299.994323][T12569] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1631'. [ 300.377171][T12587] syzkaller0: left promiscuous mode [ 300.403671][T12587] syzkaller0: left allmulticast mode [ 300.639359][T12562] netlink: 'syz.1.1629': attribute type 9 has an invalid length. [ 300.693810][T12595] netlink: 'syz.4.1637': attribute type 4 has an invalid length. [ 300.725732][T12600] netlink: 'syz.4.1637': attribute type 4 has an invalid length. [ 301.372837][T12624] openvswitch: netlink: Unexpected mask (mask=200044, allowed=1004c) [ 301.660530][T12639] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1649'. [ 301.708851][T12639] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1649'. [ 301.753557][T12639] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1649'. [ 302.020749][T12654] netlink: 'syz.4.1653': attribute type 4 has an invalid length. [ 302.081670][T12654] netlink: 'syz.4.1653': attribute type 4 has an invalid length. [ 302.290809][T12668] Bluetooth: hci2: Opcode 0x0401 failed: -22 [ 302.342738][T12668] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1656'. [ 302.649871][T12686] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1660'. [ 302.993305][T12665] netlink: 'syz.0.1655': attribute type 9 has an invalid length. [ 303.105927][T12710] ip6tnl0: Caught tx_queue_len zero misconfig [ 303.122129][T12700] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1663'. [ 303.248495][T12714] FAULT_INJECTION: forcing a failure. [ 303.248495][T12714] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 303.296394][T12714] CPU: 0 UID: 0 PID: 12714 Comm: syz.1.1666 Not tainted syzkaller #0 PREEMPT(full) [ 303.296425][T12714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 303.296443][T12714] Call Trace: [ 303.296451][T12714] [ 303.296460][T12714] dump_stack_lvl+0xe8/0x150 [ 303.296490][T12714] should_fail_ex+0x412/0x560 [ 303.296518][T12714] _copy_to_user+0x31/0xb0 [ 303.296547][T12714] bpf_prog_test_run_raw_tp+0x511/0x6c0 [ 303.296579][T12714] ? __pfx_bpf_prog_test_run_raw_tp+0x10/0x10 [ 303.296604][T12714] ? __fget_files+0x2a/0x420 [ 303.296636][T12714] ? __pfx_bpf_prog_test_run_raw_tp+0x10/0x10 [ 303.296661][T12714] bpf_prog_test_run+0x2c7/0x340 [ 303.296687][T12714] __sys_bpf+0x643/0x950 [ 303.296721][T12714] ? __pfx___sys_bpf+0x10/0x10 [ 303.296769][T12714] ? ksys_write+0x242/0x270 [ 303.296802][T12714] ? __pfx_ksys_write+0x10/0x10 [ 303.296837][T12714] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.296859][T12714] __x64_sys_bpf+0x7c/0x90 [ 303.296889][T12714] do_syscall_64+0x174/0x580 [ 303.296910][T12714] ? trace_irq_disable+0x3b/0x140 [ 303.296941][T12714] ? clear_bhb_loop+0x40/0x90 [ 303.296966][T12714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.296987][T12714] RIP: 0033:0x7f7aee39ce59 [ 303.297017][T12714] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 303.297034][T12714] RSP: 002b:00007f7aef237028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 303.297060][T12714] RAX: ffffffffffffffda RBX: 00007f7aee615fa0 RCX: 00007f7aee39ce59 [ 303.297075][T12714] RDX: 000000000000000c RSI: 0000200000000500 RDI: 000000000000000a [ 303.297098][T12714] RBP: 00007f7aef237090 R08: 0000000000000000 R09: 0000000000000000 [ 303.297110][T12714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 303.297122][T12714] R13: 00007f7aee616038 R14: 00007f7aee615fa0 R15: 00007ffcee1e39c8 [ 303.297156][T12714] [ 303.807530][T12734] block nbd2: not configured, cannot reconfigure [ 303.849047][ T5293] veth0_vlan: left promiscuous mode [ 303.883825][ T5293] veth0_vlan: entered promiscuous mode [ 304.045264][T12741] netlink: 'syz.3.1673': attribute type 13 has an invalid length. [ 304.342710][T12753] netlink: 'syz.0.1676': attribute type 3 has an invalid length. [ 304.352395][T12753] __nla_validate_parse: 2 callbacks suppressed [ 304.352416][T12753] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1676'. [ 305.487030][T12755] lo: entered allmulticast mode [ 305.502995][T12755] lo: left allmulticast mode [ 305.519716][ T9262] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 305.551725][ T9262] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.599285][ T9262] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 53329 - 0 [ 305.636617][ T9262] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 305.668802][ T9262] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.706655][ T9262] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 53329 - 0 [ 305.748359][ T9262] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 305.798758][ T9262] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.834889][ T9262] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 53329 - 0 [ 305.856005][ T9262] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 305.869588][ T9262] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.879202][ T9262] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 53329 - 0 [ 305.895108][T12779] FAULT_INJECTION: forcing a failure. [ 305.895108][T12779] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 305.959307][T12779] CPU: 1 UID: 0 PID: 12779 Comm: syz.2.1680 Not tainted syzkaller #0 PREEMPT(full) [ 305.959335][T12779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 305.959349][T12779] Call Trace: [ 305.959358][T12779] [ 305.959366][T12779] dump_stack_lvl+0xe8/0x150 [ 305.959396][T12779] should_fail_ex+0x412/0x560 [ 305.959426][T12779] _copy_to_user+0x31/0xb0 [ 305.959454][T12779] simple_read_from_buffer+0xe1/0x170 [ 305.959487][T12779] proc_fail_nth_read+0x1bb/0x230 [ 305.959518][T12779] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 305.959550][T12779] ? rw_verify_area+0x2a6/0x4d0 [ 305.959577][T12779] ? __fget_files+0x2a/0x420 [ 305.959597][T12779] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 305.959624][T12779] vfs_read+0x20c/0xa70 [ 305.959660][T12779] ? __pfx___mutex_lock+0x10/0x10 [ 305.959684][T12779] ? __pfx_vfs_read+0x10/0x10 [ 305.959715][T12779] ? __fget_files+0x2a/0x420 [ 305.959744][T12779] ? __fget_files+0x3a0/0x420 [ 305.959768][T12779] ? __fget_files+0x2a/0x420 [ 305.959803][T12779] ksys_read+0x150/0x270 [ 305.959834][T12779] ? __pfx_ksys_read+0x10/0x10 [ 305.959874][T12779] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.959896][T12779] do_syscall_64+0x174/0x580 [ 305.959917][T12779] ? trace_irq_disable+0x3b/0x140 [ 305.959946][T12779] ? clear_bhb_loop+0x40/0x90 [ 305.959971][T12779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.959991][T12779] RIP: 0033:0x7f39fc35d68e [ 305.960011][T12779] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 305.960028][T12779] RSP: 002b:00007f39fd274fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 305.960049][T12779] RAX: ffffffffffffffda RBX: 00007f39fd2756c0 RCX: 00007f39fc35d68e [ 305.960063][T12779] RDX: 000000000000000f RSI: 00007f39fd2750a0 RDI: 0000000000000008 [ 305.960086][T12779] RBP: 00007f39fd275090 R08: 0000000000000000 R09: 0000000000000000 [ 305.960098][T12779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 305.960110][T12779] R13: 00007f39fc616128 R14: 00007f39fc616090 R15: 00007ffff726c208 [ 305.960144][T12779] [ 306.541719][T12801] bridge_slave_0: left allmulticast mode [ 306.560422][T12801] bridge_slave_0: left promiscuous mode [ 306.583808][T12801] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.676658][T12801] bond0: (slave bond_slave_0): Releasing backup interface [ 306.739504][T12809] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1689'. [ 306.754998][T12801] bond0: (slave bond_slave_1): Releasing backup interface [ 306.798004][T12817] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1688'. [ 306.810043][T12817] openvswitch: netlink: IPv4 frag type 127 is out of range max 2 [ 306.846653][T12801] team0: Port device team_slave_0 removed [ 306.885502][T12801] team0: Port device team_slave_1 removed [ 306.902589][T12801] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 306.949234][T12801] bond1: (slave ip6gretap1): Releasing active interface [ 306.995392][T12801] bond2: (slave geneve2): Releasing active interface [ 307.007817][T12801] batman_adv: batadv0: Interface deactivated: gretap1 [ 307.019184][T12824] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1692'. [ 307.029689][T12801] batman_adv: batadv0: Removing interface: gretap1 [ 307.041638][ T9272] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 307.053422][ T9272] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 307.078349][T12773] netlink: 'syz.3.1679': attribute type 9 has an invalid length. [ 307.083613][ T9272] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 307.116987][ T9272] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 307.417569][T12835] bond7: up delay (2) is not a multiple of miimon (80), value rounded to 0 ms [ 307.427984][T12835] bond7: entered promiscuous mode [ 307.436063][T12835] 8021q: adding VLAN 0 to HW filter on device bond7 [ 307.467647][T12839] syzkaller0: entered promiscuous mode [ 307.473760][T12839] syzkaller0: entered allmulticast mode [ 308.069135][T12859] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1700'. [ 308.071607][T12862] netlink: 'syz.0.1702': attribute type 1 has an invalid length. [ 308.148948][T12862] netlink: 'syz.0.1702': attribute type 1 has an invalid length. [ 308.210505][T12866] atomic_op ffff888036ddd998 conn xmit_atomic 0000000000000000 [ 308.249501][T12864] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1702'. [ 308.283138][T12864] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1702'. [ 308.310930][T12869] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1704'. [ 308.396034][T12879] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1706'. [ 308.406424][T12879] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1706'. [ 308.621293][T12869] bond8: option broadcast_neighbor: invalid value (30) [ 308.651771][T12869] bond8 (unregistering): Released all slaves [ 308.795774][T12891] bond4: entered promiscuous mode [ 308.801542][T12891] 8021q: adding VLAN 0 to HW filter on device bond4 [ 309.132687][T12913] xt_hashlimit: size too large, truncated to 1048576 [ 309.982258][T12946] netlink: 'syz.2.1721': attribute type 1 has an invalid length. [ 310.016899][T12946] __nla_validate_parse: 67 callbacks suppressed [ 310.016921][T12946] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1721'. [ 310.059229][T12950] macvlan1: mtu less than device minimum [ 310.307488][T12962] netlink: 'syz.2.1725': attribute type 1 has an invalid length. [ 310.333093][T12962] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1725'. [ 310.357611][T12962] netlink: 'syz.2.1725': attribute type 1 has an invalid length. [ 310.424386][T12962] syzkaller1: entered allmulticast mode [ 311.100473][T12981] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1729'. [ 311.285210][T12986] netlink: 'syz.3.1731': attribute type 23 has an invalid length. [ 311.569170][T12999] xt_hashlimit: size too large, truncated to 1048576 [ 311.645953][T13001] syzkaller0: entered promiscuous mode [ 311.687873][T13001] syzkaller0: entered allmulticast mode [ 312.139248][T13017] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1738'. [ 312.232966][ T5648] block nbd2: Receive control failed (result -32) [ 312.233726][ T5634] block nbd2: Receive control failed (result -32) [ 312.247190][ T5644] block nbd2: Receive control failed (result -32) [ 312.399884][T13022] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1739'. [ 313.449248][T13058] xt_hashlimit: size too large, truncated to 1048576 [ 313.483352][T13063] IPv6: NLM_F_CREATE should be specified when creating new route [ 314.005192][T13082] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1755'. [ 314.017648][T13079] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1754'. [ 314.055954][T13082] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1755'. [ 314.089552][T13079] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1754'. [ 314.151191][ T5634] block nbd3: Receive control failed (result -32) [ 314.442058][T13102] syzkaller0: entered promiscuous mode [ 314.466965][T13102] syzkaller0: entered allmulticast mode [ 314.672172][ T6494] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 314.770011][T13114] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1762'. [ 314.821171][ T6494] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 315.326378][T13133] xt_hashlimit: size too large, truncated to 1048576 [ 315.909775][T13158] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 316.106677][T13142] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.114498][T13142] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.241836][T13142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 316.260189][T13142] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 316.456989][ T9270] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 316.516274][T13147] bond3: option min_links: invalid value (18446744073709551612) [ 316.524888][T13147] bond3: option min_links: allowed values 0 - 2147483647 [ 316.538765][T13147] bond3 (unregistering): Released all slaves [ 316.633618][T13149] __nla_validate_parse: 1 callbacks suppressed [ 316.633637][T13149] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1771'. [ 316.662102][T13149] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1771'. [ 316.684608][T13153] syzkaller1: entered promiscuous mode [ 316.712017][T13153] syzkaller1: entered allmulticast mode [ 316.730446][ T9274] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 316.755505][ T9274] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.781388][ T9274] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 316.889344][ T9274] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 316.916474][ T9274] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.949958][ T9274] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 317.006549][ T9274] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 317.057592][ T9274] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.096720][ T9274] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 317.213984][T13180] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 317.236163][ T9274] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 317.246450][ T9274] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.275939][ T9274] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 317.522907][T13203] netlink: 264 bytes leftover after parsing attributes in process `syz.2.1781'. [ 317.566938][ T9270] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 317.581027][T13207] xt_hashlimit: size too large, truncated to 1048576 [ 317.600111][ T9270] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 318.384481][T13238] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1791'. [ 318.612200][ T5834] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 320.540147][T13243] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1793'. [ 320.598941][T13243] gtp1: entered promiscuous mode [ 320.611803][T13243] gtp1: entered allmulticast mode [ 320.720551][T13253] netlink: 'syz.0.1798': attribute type 8 has an invalid length. [ 320.795273][T13258] xt_hashlimit: size too large, truncated to 1048576 [ 321.181232][T13267] syzkaller0: entered promiscuous mode [ 321.201058][T13267] syzkaller0: entered allmulticast mode [ 321.440293][T13275] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1807'. [ 321.492139][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 321.729104][T13295] vlan2: entered promiscuous mode [ 321.762363][T13297] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 321.987105][T13306] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1815'. [ 322.046554][T13306] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1815'. [ 322.072275][T13306] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1815'. [ 322.104625][T13306] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1815'. [ 322.147135][T13306] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1815'. [ 322.179229][T13306] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1815'. [ 322.206938][T13306] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1815'. [ 322.217341][T13306] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1815'. [ 322.244190][T13306] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1815'. [ 322.260903][T13311] netlink: 'syz.4.1816': attribute type 2 has an invalid length. [ 322.261500][T13306] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1815'. [ 322.511722][T13315] vlan2: entered allmulticast mode [ 322.539278][T13315] bond0: entered allmulticast mode [ 322.559323][T13315] bond_slave_0: entered allmulticast mode [ 322.585648][T13315] bond_slave_1: entered allmulticast mode [ 322.751043][T13323] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 322.825735][T13323] bond_slave_0: left allmulticast mode [ 322.848401][T13323] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 322.871542][T13323] bond_slave_1: left allmulticast mode [ 322.904548][T13323] bond0 (unregistering): Released all slaves [ 323.716864][T13351] netlink: 'syz.3.1827': attribute type 9 has an invalid length. [ 323.754185][T13348] 0X: renamed from batadv0 [ 323.795909][T13348] 0X: entered allmulticast mode [ 323.818707][T13348] 8021q: adding VLAN 0 to HW filter on device 60X [ 323.839249][T13348] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 323.856448][T13357] netlink: 'syz.2.1829': attribute type 32 has an invalid length. [ 323.880015][T13357] veth0_macvtap: Caught tx_queue_len zero misconfig [ 324.173969][T13358] ip6_vti0: left promiscuous mode [ 324.203426][T13358] batadv0: left promiscuous mode [ 324.229019][T13358] batadv_slave_1: left promiscuous mode [ 324.248551][T13358] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 324.265850][T13358] geneve0: left promiscuous mode [ 324.272407][T13358] macsec1: left promiscuous mode [ 324.365082][T13358] ipip1: left promiscuous mode [ 324.609464][ T5890] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 324.638153][T13391] IPVS: set_ctl: invalid protocol: 0 172.20.20.57:20003 [ 324.770211][ T9262] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 324.802016][ T9262] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 324.841457][ T9262] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 325.150481][T13408] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 325.201569][T13408] bond7: left promiscuous mode [ 325.210970][T13408] bond7: left allmulticast mode [ 325.570126][T13419] netlink: 'syz.1.1843': attribute type 1 has an invalid length. [ 325.691679][T13421] syzkaller0: entered promiscuous mode [ 325.698122][T13421] syzkaller0: entered allmulticast mode [ 325.846783][T13424] bond8: Unable to set down delay as MII monitoring is disabled [ 325.869530][T13424] bond8 (unregistering): Released all slaves [ 325.900919][T13422] tipc: Started in network mode [ 325.909603][T13422] tipc: Node identity 1a5dab4b6b06, cluster identity 4711 [ 325.924401][T13422] tipc: Enabled bearer , priority 0 [ 326.405788][T13447] netlink: 'syz.2.1852': attribute type 39 has an invalid length. [ 327.045119][ T6503] tipc: Node number set to 1901833035 [ 327.087615][T13480] __nla_validate_parse: 37 callbacks suppressed [ 327.087667][T13480] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1861'. [ 327.644131][T13501] netlink: 'syz.1.1865': attribute type 1 has an invalid length. [ 328.037810][T13481] netlink: 'syz.2.1860': attribute type 1 has an invalid length. [ 328.094677][T13481] 8021q: adding VLAN 0 to HW filter on device bond0 [ 328.179468][T13481] vlan0: entered promiscuous mode [ 328.187601][T13481] bond0: entered promiscuous mode [ 328.193609][T13481] vlan0: entered allmulticast mode [ 328.198948][T13481] bond0: entered allmulticast mode [ 328.224141][T13481] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1860'. [ 328.286119][T13481] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 328.328316][T13481] bond0: (slave batadv0): making interface the new active one [ 328.336817][T13518] netlink: 'syz.1.1870': attribute type 1 has an invalid length. [ 328.366363][T13481] batadv0: entered promiscuous mode [ 328.391509][T13481] batadv0: entered allmulticast mode [ 328.465292][T13481] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 329.156967][ T9262] bond0 (unregistering): (slave batadv0): Releasing active interface [ 329.172331][ T9262] batadv0: left promiscuous mode [ 329.185461][ T9262] batadv0: left allmulticast mode [ 329.207728][ T9262] bond0 (unregistering): Released all slaves [ 329.281297][T13549] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1878'. [ 329.771780][T13571] netlink: 'syz.1.1882': attribute type 13 has an invalid length. [ 329.857730][T13575] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1882'. [ 330.180874][T13584] netlink: 'syz.2.1884': attribute type 1 has an invalid length. [ 330.241249][T13585] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1884'. [ 330.540269][T13584] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 330.792410][T13593] tipc: Resetting bearer [ 330.838825][T13603] IPVS: set_ctl: invalid protocol: 60 255.255.255.255:20000 [ 330.899897][T13602] netlink: 'syz.1.1888': attribute type 11 has an invalid length. [ 330.964158][T13607] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1888'. [ 331.001745][T13605] xt_hashlimit: size too large, truncated to 1048576 [ 331.093955][T13608] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 331.132430][T13608] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 331.708013][T13626] tunl0: Caught tx_queue_len zero misconfig [ 332.151772][T13646] bond5: up delay (1) is not a multiple of miimon (100), value rounded to 0 ms [ 332.162685][T13646] bond5: down delay (128) is not a multiple of miimon (100), value rounded to 100 ms [ 332.464275][T13657] netlink: 'syz.2.1900': attribute type 15 has an invalid length. [ 332.496715][T13657] netlink: 666 bytes leftover after parsing attributes in process `syz.2.1900'. [ 332.525957][ T5834] IPVS: starting estimator thread 0... [ 332.634206][T13659] IPVS: using max 31 ests per chain, 74400 per kthread [ 332.684760][T13666] netlink: 'syz.0.1901': attribute type 3 has an invalid length. [ 332.724209][T13666] netlink: 'syz.0.1901': attribute type 16 has an invalid length. [ 332.760578][T13666] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1901'. [ 332.899591][T13669] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1901'. [ 333.401668][T13681] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1903'. [ 333.421759][T13676] ip6tnl0: Caught tx_queue_len zero misconfig [ 333.464918][T13679] veth1_to_bond: entered allmulticast mode [ 333.641540][T13684] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1905'. [ 333.652471][T13681] veth1_to_bond (unregistering): left allmulticast mode [ 333.737623][T13687] netlink: 'syz.4.1906': attribute type 1 has an invalid length. [ 333.868582][T13687] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 334.084803][T13698] xt_hashlimit: size too large, truncated to 1048576 [ 334.440001][T13706] ipvlan1: entered promiscuous mode [ 334.466273][T13714] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1913'. [ 334.471723][T13706] ipvlan1: entered allmulticast mode [ 334.489841][T13710] sctp: [Deprecated]: syz.4.1910 (pid 13710) Use of struct sctp_assoc_value in delayed_ack socket option. [ 334.489841][T13710] Use struct sctp_sack_info instead [ 334.509199][T13706] veth0_vlan: entered allmulticast mode [ 334.705134][T13720] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1914'. [ 334.795667][T13720] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1914'. [ 334.868810][T13727] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1914'. [ 334.943192][T13727] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 335.027776][T13720] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1914'. [ 335.223609][T13720] 8021q: adding VLAN 0 to HW filter on device bond0 [ 335.268692][T13720] 8021q: adding VLAN 0 to HW filter on device team0 [ 335.376763][T13720] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 335.609958][T13720] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 335.647340][T13720] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 335.716184][T13720] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 335.737689][T13720] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 335.762424][T13720] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 335.780598][T13720] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 335.803090][T13720] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 335.887184][T13734] gtp0: entered promiscuous mode [ 335.898319][T13734] gtp0: entered allmulticast mode [ 335.932257][T13742] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 335.972923][T13742] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 336.005854][T13742] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 336.101266][ T1180] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.167018][ T1180] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.203979][ T1180] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.536875][T13769] bond9 (unregistering): Released all slaves [ 336.984178][T13792] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 337.033311][T13794] netlink: 'syz.0.1926': attribute type 9 has an invalid length. [ 337.055841][T13792] CPU: 1 UID: 0 PID: 13792 Comm: syz.4.1924 Not tainted syzkaller #0 PREEMPT(full) [ 337.055871][T13792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 337.055885][T13792] Call Trace: [ 337.055894][T13792] [ 337.055903][T13792] dump_stack_lvl+0xe8/0x150 [ 337.055934][T13792] sysfs_warn_dup+0x8e/0xa0 [ 337.055963][T13792] sysfs_do_create_link_sd+0xc0/0x110 [ 337.055995][T13792] device_add_class_symlinks+0x1cf/0x240 [ 337.056036][T13792] device_add+0x475/0xbb0 [ 337.056074][T13792] wiphy_register+0x1fb1/0x2fe0 [ 337.056127][T13792] ? __pfx_wiphy_register+0x10/0x10 [ 337.056161][T13792] ? __pfx_netdev_run_todo+0x10/0x10 [ 337.056188][T13792] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 337.056223][T13792] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 337.056263][T13792] ieee80211_register_hw+0x3c53/0x4910 [ 337.056301][T13792] ? ieee80211_register_hw+0x18e1/0x4910 [ 337.056357][T13792] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 337.056385][T13792] ? __asan_memset+0x22/0x50 [ 337.056411][T13792] ? __hrtimer_setup+0x1b7/0x260 [ 337.056449][T13792] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 337.056478][T13792] mac80211_hwsim_new_radio+0x3306/0x57b0 [ 337.056538][T13792] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 337.056566][T13792] ? __asan_memcpy+0x40/0x70 [ 337.056600][T13792] hwsim_new_radio_nl+0xd96/0xfa0 [ 337.056642][T13792] genl_family_rcv_msg_doit+0x22a/0x330 [ 337.056683][T13792] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 337.056730][T13792] ? bpf_lsm_capable+0x9/0x20 [ 337.056751][T13792] ? security_capable+0x7e/0x2c0 [ 337.056790][T13792] genl_rcv_msg+0x61c/0x7a0 [ 337.056829][T13792] ? __pfx_genl_rcv_msg+0x10/0x10 [ 337.056863][T13792] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 337.056903][T13792] netlink_rcv_skb+0x232/0x4b0 [ 337.056931][T13792] ? __pfx_genl_rcv_msg+0x10/0x10 [ 337.056964][T13792] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 337.057009][T13792] ? down_read+0x270/0x2e0 [ 337.057032][T13792] ? genl_rcv+0xd/0x40 [ 337.057064][T13792] genl_rcv+0x28/0x40 [ 337.057092][T13792] netlink_unicast+0x75c/0x8e0 [ 337.057128][T13792] netlink_sendmsg+0x813/0xb40 [ 337.057165][T13792] ? __pfx_netlink_sendmsg+0x10/0x10 [ 337.057195][T13792] ? aa_sock_msg_perm+0xf1/0x1b0 [ 337.057230][T13792] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 337.057263][T13792] ____sys_sendmsg+0x972/0x9f0 [ 337.057289][T13792] ? __might_fault+0xaf/0x130 [ 337.057326][T13792] ? __pfx_____sys_sendmsg+0x10/0x10 [ 337.057364][T13792] ? import_iovec+0x73/0xa0 [ 337.057396][T13792] ___sys_sendmsg+0x2a5/0x360 [ 337.057419][T13792] ? __lock_acquire+0x6b5/0x2cf0 [ 337.057457][T13792] ? __pfx____sys_sendmsg+0x10/0x10 [ 337.057491][T13792] ? futex_wake+0x4ac/0x580 [ 337.057555][T13792] ? __fget_files+0x2a/0x420 [ 337.057581][T13792] ? __fget_files+0x3a0/0x420 [ 337.057620][T13792] __x64_sys_sendmsg+0x1bd/0x2a0 [ 337.057648][T13792] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 337.057685][T13792] ? rcu_is_watching+0x15/0xb0 [ 337.057722][T13792] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.057746][T13792] do_syscall_64+0x174/0x580 [ 337.057768][T13792] ? trace_irq_disable+0x3b/0x140 [ 337.057798][T13792] ? clear_bhb_loop+0x40/0x90 [ 337.057827][T13792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.057848][T13792] RIP: 0033:0x7fe76959ce59 [ 337.057869][T13792] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 337.057887][T13792] RSP: 002b:00007fe76a44e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 337.057910][T13792] RAX: ffffffffffffffda RBX: 00007fe769816180 RCX: 00007fe76959ce59 [ 337.057925][T13792] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004 [ 337.057939][T13792] RBP: 00007fe769632d6f R08: 0000000000000000 R09: 0000000000000000 [ 337.057951][T13792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 337.057963][T13792] R13: 00007fe769816218 R14: 00007fe769816180 R15: 00007fff8bf5a778 [ 337.058000][T13792] [ 337.607092][T13805] xt_hashlimit: size too large, truncated to 1048576 [ 338.319540][T13822] __nla_validate_parse: 48 callbacks suppressed [ 338.319560][T13822] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1931'. [ 338.398692][T13822] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1931'. [ 338.728305][T13834] x_tables: duplicate underflow at hook 3 [ 338.787235][T13840] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1934'. [ 338.810296][T13840] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1934'. [ 339.289869][T13854] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1939'. [ 339.797545][T13877] xt_hashlimit: size too large, truncated to 1048576 [ 339.946202][T13884] netlink: 'syz.4.1945': attribute type 1 has an invalid length. [ 339.981139][T13884] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1945'. [ 340.176626][T13895] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1947'. [ 340.206489][T13895] netlink: 'syz.2.1947': attribute type 6 has an invalid length. [ 340.273004][T13897] netlink: 8752 bytes leftover after parsing attributes in process `syz.1.1948'. [ 340.294202][T13886] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1946'. [ 341.271807][T13922] netlink: 'syz.3.1953': attribute type 7 has an invalid length. [ 341.527234][T13892] netlink: 45 bytes leftover after parsing attributes in process `syz.2.1947'. [ 342.063171][T13938] hma(kX: entered promiscuous mode [ 342.141684][T13936] geneve3: entered promiscuous mode [ 342.424547][T13947] netlink: 'syz.0.1961': attribute type 11 has an invalid length. [ 342.461593][T13952] xt_hashlimit: size too large, truncated to 1048576 [ 342.723611][T13965] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 342.749092][T13968] xt_CT: You must specify a L4 protocol and not use inversions on it [ 342.960947][T13971] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 343.054627][T13980] netlink: 'syz.4.1969': attribute type 6 has an invalid length. [ 343.126468][T13980] netlink: 'syz.4.1969': attribute type 6 has an invalid length. [ 343.446484][T13995] __nla_validate_parse: 5 callbacks suppressed [ 343.446506][T13995] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1973'. [ 343.814441][T14007] netlink: 'syz.3.1975': attribute type 1 has an invalid length. [ 343.864968][T14012] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1976'. [ 344.098193][T14021] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1979'. [ 344.372372][T14031] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 344.569978][T14039] xt_hashlimit: size too large, truncated to 1048576 [ 344.646256][T14031] ip6gretap0: entered promiscuous mode [ 344.675776][T14031] ip6gretap0: entered allmulticast mode [ 345.660294][T14067] bond4: Unable to set peer notification delay as MII monitoring is disabled [ 345.692598][T14067] bond4 (unregistering): Released all slaves [ 345.829975][T14074] veth0: entered promiscuous mode [ 345.853504][T14074] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1992'. [ 345.949898][T14074] veth0 (unregistering): left promiscuous mode [ 346.166265][T14078] IPv6: sit1: Disabled Multicast RS [ 346.260621][T14078] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1993'. [ 346.844288][T14100] xt_hashlimit: size too large, truncated to 1048576 [ 347.186909][T14110] netlink: 'syz.0.2002': attribute type 11 has an invalid length. [ 347.324343][T14110] syzkaller0: entered promiscuous mode [ 347.360214][T14110] syzkaller0: entered allmulticast mode [ 347.805228][T14126] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2007'. [ 348.411510][T14148] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2013'. [ 348.507128][T14156] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 348.576794][T14156] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 348.699875][T14159] xt_hashlimit: size too large, truncated to 1048576 [ 348.777337][T14162] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2018'. [ 349.283119][T14184] netlink: 'syz.2.2023': attribute type 7 has an invalid length. [ 349.316417][T14184] netlink: 'syz.2.2023': attribute type 8 has an invalid length. [ 349.374388][T14186] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2019'. [ 349.404987][T14184] syzkaller1: entered promiscuous mode [ 349.434403][T14184] syzkaller1: entered allmulticast mode [ 349.459562][T14188] PF_CAN: dropped non conform CAN skbuff: dev type 771, len 324 [ 349.971485][T14207] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2026'. [ 350.036287][T14207] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2026'. [ 350.121101][T14212] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2029'. [ 350.152531][T14207] netlink: 'syz.4.2026': attribute type 2 has an invalid length. [ 350.161249][T14207] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2026'. [ 350.350029][T14214] tipc: Enabling of bearer rejected, already enabled [ 350.529871][T14216] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2031'. [ 350.575696][T14216] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2031'. [ 350.898891][T14233] xt_hashlimit: size too large, truncated to 1048576 [ 352.097137][T14276] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2043'. [ 352.257476][T14274] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 352.280060][T14274] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 352.716443][T14251] netlink: 'syz.1.2038': attribute type 9 has an invalid length. [ 353.068817][T14300] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2048'. [ 353.834355][T14324] netlink: 'syz.0.2053': attribute type 142 has an invalid length. [ 354.038440][T14335] __nla_validate_parse: 1 callbacks suppressed [ 354.038497][T14335] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2055'. [ 354.685009][T14355] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2059'. [ 355.022912][T14368] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2060'. [ 355.345956][T14370] bond8: option ad_user_port_key: invalid value (65535) [ 355.388188][T14370] bond8: option ad_user_port_key: allowed values 0 - 1023 [ 355.437861][T14373] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2062'. [ 355.456249][T14370] bond8 (unregistering): Released all slaves [ 355.546201][T14384] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2063'. [ 355.626674][T14381] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2063'. [ 356.006777][T14395] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2066'. [ 356.040355][T14395] netlink: 'syz.1.2066': attribute type 3 has an invalid length. [ 356.105325][T14395] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2066'. [ 356.114685][T14399] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2067'. [ 356.152535][T14399] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2067'. [ 356.182064][T14399] netlink: 'syz.0.2067': attribute type 12 has an invalid length. [ 356.304045][T14399] netlink: 'syz.0.2067': attribute type 11 has an invalid length. [ 356.610513][T14416] netlink: 'syz.3.2071': attribute type 10 has an invalid length. [ 357.175123][T14434] 5n: entered promiscuous mode [ 357.947348][T14467] tipc: Enabling of bearer rejected, already enabled [ 358.662189][T14490] netlink: 'syz.2.2094': attribute type 1 has an invalid length. [ 359.344632][T14507] __nla_validate_parse: 8 callbacks suppressed [ 359.344678][T14507] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2100'. [ 360.011047][T14524] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2104'. [ 360.050011][T14524] netlink: 42 bytes leftover after parsing attributes in process `syz.3.2104'. [ 360.082973][T14524] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2104'. [ 360.315616][T14532] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2106'. [ 360.861198][T14550] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2110'. [ 361.124046][T14560] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 361.203595][T14559] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 361.433443][T14570] netlink: 192 bytes leftover after parsing attributes in process `syz.0.2113'. [ 361.517571][T14570] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2113'. [ 362.092954][T14577] netlink: 'syz.2.2116': attribute type 2 has an invalid length. [ 362.112322][T14577] netlink: 'syz.2.2116': attribute type 2 has an invalid length. [ 363.777280][T14582] netlink: 'syz.4.2117': attribute type 9 has an invalid length. [ 364.810091][T14588] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2119'. [ 365.334002][T14607] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2124'. [ 365.389217][T14607] netlink: 'syz.1.2124': attribute type 10 has an invalid length. [ 365.422077][T14607] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2124'. [ 365.477041][T14607] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2124'. [ 365.759771][T14625] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2129'. [ 365.902476][T14630] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2131'. [ 365.922905][T14630] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2131'. [ 365.999053][T14637] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2133'. [ 366.051610][T14637] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2133'. [ 366.085033][T14637] netlink: 'syz.2.2133': attribute type 2 has an invalid length. [ 366.112437][T14637] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2133'. [ 366.973669][T14653] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 367.364469][T14674] xt_hl: Unknown TTL match mode: 237 [ 367.397331][T14674] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 367.404692][T14674] IPv6: NLM_F_CREATE should be set when creating new route [ 368.358607][T14702] netlink: 'syz.2.2150': attribute type 2 has an invalid length. [ 368.590229][T14706] netlink: 'syz.3.2149': attribute type 39 has an invalid length. [ 368.865064][T14713] vlan2: entered promiscuous mode [ 368.888013][T14713] gretap0: entered promiscuous mode [ 370.580742][T14772] __nla_validate_parse: 5 callbacks suppressed [ 370.580764][T14772] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2167'. [ 370.650790][T14772] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2167'. [ 370.712763][T14772] netlink: 'syz.0.2167': attribute type 2 has an invalid length. [ 370.745314][T14772] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2167'. [ 371.146682][T14788] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2169'. [ 371.171330][T14788] bridge: RTM_NEWNEIGH with invalid state 0x0 [ 371.270592][T14787] netlink: 'syz.1.2170': attribute type 1 has an invalid length. [ 372.874993][T14826] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 373.160663][T14835] netlink: 'syz.1.2183': attribute type 1 has an invalid length. [ 373.229189][T14835] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2183'. [ 373.317807][T14835] netlink: 'syz.1.2183': attribute type 10 has an invalid length. [ 373.383014][T14848] netlink: 'syz.1.2183': attribute type 10 has an invalid length. [ 373.452755][T14835] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 373.489436][T14835] team0: Port device netdevsim1 added [ 373.558453][T14848] team0: Port device netdevsim1 removed [ 373.602388][T14848] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 373.627671][ T30] audit: type=1800 audit(1780571726.618:6): pid=14858 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2190" name=CB dev="tmpfs" ino=2137 res=0 errno=0 [ 373.650807][T14848] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 373.958935][T14864] sctp: [Deprecated]: syz.1.2194 (pid 14864) Use of int in max_burst socket option. [ 373.958935][T14864] Use struct sctp_assoc_value instead [ 374.279814][T14880] pimreg9: entered allmulticast mode [ 374.503755][ T6503] IPVS: starting estimator thread 0... [ 374.613391][T14887] IPVS: using max 26 ests per chain, 62400 per kthread [ 374.758418][T14892] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2202'. [ 374.875121][T14900] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2204'. [ 374.929343][T14900] netlink: 212340 bytes leftover after parsing attributes in process `syz.2.2204'. [ 374.974148][T14900] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 375.126936][T14870] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2195'. [ 375.618941][T14928] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2211'. [ 375.955095][T14939] 8021q: adding VLAN 0 to HW filter on device bond9 [ 375.965041][T14939] bond8: (slave bond9): Enslaving as an active interface with an up link [ 376.028454][T14942] batman_adv: batadv0: Adding interface: vlan2 [ 376.092099][T14942] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 376.177383][T14942] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2213'. [ 376.224221][T14944] bond8: (slave gretap1): Enslaving as an active interface with an up link [ 376.252387][T14956] netlink: 'syz.2.2216': attribute type 13 has an invalid length. [ 376.930463][T14959] mac80211_hwsim hwsim9 syzkaller0: Caught tx_queue_len zero misconfig [ 377.028318][T14965] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2216'. [ 377.273030][T14985] netlink: 240 bytes leftover after parsing attributes in process `syz.0.2224'. [ 377.346386][T14996] netlink: 'syz.2.2227': attribute type 1 has an invalid length. [ 377.404757][T14985] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2224'. [ 377.876072][T15015] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2229'. [ 377.954308][T15019] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma? [ 377.987247][T15022] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2229'. [ 378.000378][T15020] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2231'. [ 378.115370][T15025] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2231'. [ 378.554896][T15035] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2237'. [ 378.863677][T15044] 8021q: adding VLAN 0 to HW filter on device bond6 [ 379.004464][T15049] tc_dump_action: action bad kind [ 379.680781][T15086] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 380.167244][T15100] netlink: 'syz.4.2252': attribute type 2 has an invalid length. [ 381.152582][T15126] __nla_validate_parse: 13 callbacks suppressed [ 381.152639][T15126] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2259'. [ 381.872689][T15134] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2265'. [ 381.900745][T15136] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2263'. [ 381.923257][T15136] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2263'. [ 381.957752][T15136] netlink: 'syz.2.2263': attribute type 13 has an invalid length. [ 381.989900][T15136] netlink: 'syz.2.2263': attribute type 11 has an invalid length. [ 382.186765][T15132] syzkaller1: entered promiscuous mode [ 382.236582][T15132] syzkaller1: entered allmulticast mode [ 382.654570][T15169] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2270'. [ 383.181081][T15187] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2274'. [ 383.222142][T15187] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2274'. [ 383.391750][T15187] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2274'. [ 383.508068][T15202] netlink: 'syz.2.2277': attribute type 4 has an invalid length. [ 384.063975][T15208] netlink: 'syz.1.2279': attribute type 2 has an invalid length. [ 384.084193][T15211] tipc: Enabling of bearer rejected, already enabled [ 384.095000][T15208] netlink: 'syz.1.2279': attribute type 1 has an invalid length. [ 384.097494][T15211] syzkaller0: mtu less than device minimum [ 384.128819][T15208] netlink: 'syz.1.2279': attribute type 1 has an invalid length. [ 385.639760][T15255] veth0: entered promiscuous mode [ 385.872109][T15261] veth0: left promiscuous mode [ 386.380082][T15285] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2301'. [ 386.422484][T15284] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2301'. [ 386.530292][T15285] 8021q: adding VLAN 0 to HW filter on device bond7 [ 386.608746][T15297] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2303'. [ 387.585391][T15331] xt_hashlimit: size too large, truncated to 1048576 [ 387.881613][T15335] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2313'. [ 387.918200][T15342] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2314'. [ 388.223132][T15352] team0: entered promiscuous mode [ 388.250067][T15352] team_slave_0: entered promiscuous mode [ 388.274422][T15352] team_slave_1: entered promiscuous mode [ 388.302270][T15352] team0: entered allmulticast mode [ 388.335968][T15355] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2317'. [ 388.337167][T15352] team_slave_0: entered allmulticast mode [ 388.368339][T15352] team_slave_1: entered allmulticast mode [ 388.375221][T15352] team0: Cannot enslave team device to itself [ 388.729881][T15368] sctp: [Deprecated]: syz.4.2321 (pid 15368) Use of int in max_burst socket option. [ 388.729881][T15368] Use struct sctp_assoc_value instead [ 389.541967][T15398] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2331'. [ 390.196272][T15423] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1^!Y [ 390.196272][T15423] 3UH5rBn [ 390.331246][T15428] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2342'. [ 390.382974][T15429] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2341'. [ 390.470331][T15428] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2342'. [ 391.580037][T15472] xt_hashlimit: size too large, truncated to 1048576 [ 391.874789][T15481] __nla_validate_parse: 2 callbacks suppressed [ 391.874849][T15481] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2356'. [ 391.960177][T15480] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2356'. [ 392.898810][T15509] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2363'. [ 392.951442][T15515] netlink: 'syz.1.2365': attribute type 10 has an invalid length. [ 392.960665][T15515] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2365'. [ 393.008728][T15515] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2365'. [ 393.112464][T15512] IPVS: persistence engine module ip_vs_pe_ not found [ 393.575518][T15532] veth0: entered promiscuous mode [ 393.605098][T15532] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2369'. [ 393.787683][T15535] ip6t_rpfilter: unknown options [ 393.841183][T15533] gtp0: entered promiscuous mode [ 393.849176][T15533] gtp0: entered allmulticast mode [ 393.871105][T15538] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2371'. [ 394.115237][T15548] syzkaller0: left promiscuous mode [ 394.124932][T15548] syzkaller0: left allmulticast mode [ 394.132991][T15548] tipc: Resetting bearer [ 395.020764][T15574] netlink: 92 bytes leftover after parsing attributes in process `syz.4.2382'. [ 395.622345][T15589] netlink: 'syz.1.2386': attribute type 3 has an invalid length. [ 395.678562][T15591] IPv6: addrconf: prefix option has invalid lifetime [ 395.744287][ T5634] block nbd4: Receive control failed (result -22) [ 395.804714][T15589] nbd4: detected capacity change from 0 to 32 [ 395.885551][ T9794] block nbd4: Dead connection, failed to find a fallback [ 395.896949][ T9794] block nbd4: shutting down sockets [ 395.905471][ T9794] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 395.905782][T15596] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2388'. [ 395.940112][ T9794] Buffer I/O error on dev nbd4, logical block 0, async page read [ 395.957933][T15598] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2389'. [ 395.969604][ T9794] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 395.982561][ T9794] Buffer I/O error on dev nbd4, logical block 0, async page read [ 396.022548][ T9794] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 396.042182][ T9794] Buffer I/O error on dev nbd4, logical block 0, async page read [ 396.046420][T15598] ip6gre2: entered promiscuous mode [ 396.066266][ T9794] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 396.079088][ T9794] Buffer I/O error on dev nbd4, logical block 0, async page read [ 396.094515][ T9794] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 396.122069][ T9794] Buffer I/O error on dev nbd4, logical block 0, async page read [ 396.131284][ T9794] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 396.145782][ T9794] Buffer I/O error on dev nbd4, logical block 0, async page read [ 396.152651][T15598] ip6gre2: entered allmulticast mode [ 396.159054][ T9794] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 396.170805][ T9794] Buffer I/O error on dev nbd4, logical block 0, async page read [ 396.265895][ T9794] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 396.319053][ T9794] Buffer I/O error on dev nbd4, logical block 0, async page read [ 396.336190][ T9794] ldm_validate_partition_table(): Disk read failed. [ 396.345692][ T9794] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 396.356367][ T9794] Buffer I/O error on dev nbd4, logical block 0, async page read [ 396.366503][ T9794] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 396.377906][ T9794] Buffer I/O error on dev nbd4, logical block 0, async page read [ 396.389334][ T9794] Dev nbd4: unable to read RDB block 0 [ 396.396688][ T9794] nbd4: unable to read partition table [ 396.412707][ T9794] ldm_validate_partition_table(): Disk read failed. [ 396.420891][ T9794] Dev nbd4: unable to read RDB block 0 [ 396.432924][ T9794] nbd4: unable to read partition table [ 396.571400][T15616] netlink: 'syz.0.2395': attribute type 1 has an invalid length. [ 396.583174][ T8264] IPVS: starting estimator thread 0... [ 396.683265][T15617] IPVS: using max 26 ests per chain, 62400 per kthread [ 396.800859][T15616] 8021q: adding VLAN 0 to HW filter on device bond8 [ 396.940054][T15621] bond8: (slave ip6gretap2): making interface the new active one [ 396.952739][T15630] netlink: 'syz.4.2400': attribute type 21 has an invalid length. [ 396.970265][T15621] bond8: (slave ip6gretap2): Enslaving as an active interface with an up link [ 396.982625][T15630] __nla_validate_parse: 2 callbacks suppressed [ 396.982659][T15630] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2400'. [ 397.028537][T15630] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2400'. [ 397.894979][T15660] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2408'. [ 397.915088][T15656] tipc: Started in network mode [ 397.930994][T15663] xt_hashlimit: size too large, truncated to 1048576 [ 397.939452][T15660] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2408'. [ 397.950687][T15656] tipc: Node identity ac1414aa, cluster identity 4711 [ 397.985577][T15656] tipc: Enabled bearer , priority 10 [ 398.462990][T15673] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2411'. [ 398.647498][T15679] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2413'. [ 398.749133][T15677] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2412'. [ 398.785456][T15677] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2412'. [ 399.103067][ T8264] tipc: Node number set to 2886997162 [ 399.446777][T15709] netlink: 'syz.3.2418': attribute type 32 has an invalid length. [ 399.480783][T15708] netlink: 'syz.1.2419': attribute type 1 has an invalid length. [ 399.520241][T15708] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 399.797434][T15720] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2418'. [ 399.960598][T15723] netlink: 'syz.2.2421': attribute type 1 has an invalid length. [ 400.068960][T15727] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1500) ! [ 400.109114][T15727] syzkaller0: entered promiscuous mode [ 400.122262][T15727] syzkaller0: entered allmulticast mode [ 400.206274][T15731] IPVS: length: 223 != 8 [ 400.279659][T15731] veth0_vlan: left promiscuous mode [ 400.530891][T15738] netlink: 'syz.1.2424': attribute type 1 has an invalid length. [ 400.556073][T15738] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2424'. [ 400.882074][T15745] Bluetooth: hci4: Opcode 0x0401 failed: -22 [ 401.013559][T15751] : renamed from bond0 [ 401.042134][T15751] ip6tnl0: Caught tx_queue_len zero misconfig [ 401.063753][T15751] sch_tbf: burst 3 is lower than device ip6tnl0 mtu (1452) ! [ 401.248344][T15756] netlink: 'syz.0.2430': attribute type 1 has an invalid length. [ 402.193663][T15797] __nla_validate_parse: 4 callbacks suppressed [ 402.193683][T15797] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2441'. [ 402.228461][T15800] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2442'. [ 402.416624][T15797] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2441'. [ 403.007159][T15829] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2450'. [ 403.313873][T15840] ip6gretap0 speed is unknown, defaulting to 1000 [ 403.498459][T15840] ip6gretap0 speed is unknown, defaulting to 1000 [ 403.538376][T15848] netlink: 'syz.2.2456': attribute type 13 has an invalid length. [ 403.586032][T15848] netlink: 'syz.2.2456': attribute type 17 has an invalid length. [ 403.840691][T15845] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.848592][T15845] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.860791][T15854] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2456'. [ 404.013093][T15845] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 404.031261][T15845] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 404.160639][T15868] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2461'. [ 404.326297][T15845] virt_wifi0: left allmulticast mode [ 404.404373][T15840] ip6gretap0 speed is unknown, defaulting to 1000 [ 404.417540][T15840] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 404.433452][T15840] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 404.459819][T15840] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 404.509318][T15840] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 404.545797][T15848] ip6gretap0: left promiscuous mode [ 404.568886][T15848] 8021q: adding VLAN 0 to HW filter on device team0 [ 404.584376][T15848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 404.607781][T15848] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.615069][T15848] bridge0: port 1(bridge_slave_0) entered forwarding state [ 404.629173][T15848] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.636532][T15848] bridge0: port 2(bridge_slave_1) entered forwarding state [ 404.655948][T15848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 404.666673][T15848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 404.674874][T15848] xfrm0: left allmulticast mode [ 404.694553][T15848] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 404.751612][ T9272] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 4352 - 0 [ 404.785505][ T9272] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.828111][ T9272] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 4352 - 0 [ 404.850140][ T9272] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.859556][T15874] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 404.920538][T15840] ip6gretap0 speed is unknown, defaulting to 1000 [ 404.949719][ T9272] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 4352 - 0 [ 404.973697][ T9272] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.983332][ T9272] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 4352 - 0 [ 405.003406][ T9272] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.026350][T15840] ip6gretap0 speed is unknown, defaulting to 1000 [ 405.044831][T15840] ip6gretap0 speed is unknown, defaulting to 1000 [ 405.068507][T15840] ip6gretap0 speed is unknown, defaulting to 1000 [ 405.082377][T15840] ip6gretap0 speed is unknown, defaulting to 1000 [ 405.231130][T15894] bridge9: entered promiscuous mode [ 405.338957][T15901] xt_policy: output policy not valid in PREROUTING and INPUT [ 405.406182][T15905] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2470'. [ 405.470798][T15888] netlink: 'syz.3.2463': attribute type 9 has an invalid length. [ 405.625747][T15917] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2473'. [ 406.023685][T15929] syzkaller0: entered promiscuous mode [ 406.041090][T15929] syzkaller0: entered allmulticast mode [ 406.067287][T15929] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2478'. [ 406.092439][T15929] netlink: 'syz.1.2478': attribute type 32 has an invalid length. [ 406.171582][T15931] bond9: invalid ARP target 0.0.0.0 specified for addition [ 406.219913][T15931] bond9: option arp_ip_target: invalid value (0) [ 406.275261][T15931] bond9 (unregistering): Released all slaves [ 406.359882][T15929] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 406.621225][T15941] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2480'. [ 407.005508][T15958] netlink: 'syz.1.2486': attribute type 1 has an invalid length. [ 407.122682][T15958] 8021q: adding VLAN 0 to HW filter on device bond4 [ 407.205498][T15962] vlan3: entered allmulticast mode [ 407.236882][T15962] bond4: entered allmulticast mode [ 408.206126][T15982] netlink: 'syz.2.2489': attribute type 9 has an invalid length. [ 408.819979][T16031] FAULT_INJECTION: forcing a failure. [ 408.819979][T16031] name failslab, interval 1, probability 0, space 0, times 1 [ 408.896456][T16031] CPU: 0 UID: 0 PID: 16031 Comm: syz.3.2494 Not tainted syzkaller #0 PREEMPT(full) [ 408.896491][T16031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 408.896509][T16031] Call Trace: [ 408.896521][T16031] [ 408.896530][T16031] dump_stack_lvl+0xe8/0x150 [ 408.896708][T16031] should_fail_ex+0x412/0x560 [ 408.896810][T16031] should_failslab+0xa8/0x100 [ 408.896865][T16031] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 408.896902][T16031] ? __alloc_skb+0x186/0x7d0 [ 408.896983][T16031] ? __alloc_skb+0x1d0/0x7d0 [ 408.897000][T16031] ? __local_bh_enable_ip+0xd0/0x130 [ 408.897047][T16031] __alloc_skb+0x1d0/0x7d0 [ 408.897073][T16031] netlink_sendmsg+0x5d4/0xb40 [ 408.897148][T16031] ? __pfx_netlink_sendmsg+0x10/0x10 [ 408.897177][T16031] ? aa_sock_msg_perm+0xf1/0x1b0 [ 408.897293][T16031] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 408.897341][T16031] ____sys_sendmsg+0x972/0x9f0 [ 408.897410][T16031] ? __might_fault+0xaf/0x130 [ 408.897451][T16031] ? __pfx_____sys_sendmsg+0x10/0x10 [ 408.897489][T16031] ? import_iovec+0x73/0xa0 [ 408.897569][T16031] ___sys_sendmsg+0x2a5/0x360 [ 408.897590][T16031] ? __lock_acquire+0x6b5/0x2cf0 [ 408.897633][T16031] ? __pfx____sys_sendmsg+0x10/0x10 [ 408.897694][T16031] ? __fget_files+0x2a/0x420 [ 408.897731][T16031] ? __fget_files+0x3a0/0x420 [ 408.897768][T16031] __x64_sys_sendmsg+0x1bd/0x2a0 [ 408.897794][T16031] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 408.897828][T16031] ? __pfx_ksys_write+0x10/0x10 [ 408.897875][T16031] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.897914][T16031] do_syscall_64+0x174/0x580 [ 408.898007][T16031] ? trace_irq_disable+0x3b/0x140 [ 408.898050][T16031] ? clear_bhb_loop+0x40/0x90 [ 408.898076][T16031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.898096][T16031] RIP: 0033:0x7f184a99ce59 [ 408.898117][T16031] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 408.898134][T16031] RSP: 002b:00007f184b92f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 408.898157][T16031] RAX: ffffffffffffffda RBX: 00007f184ac15fa0 RCX: 00007f184a99ce59 [ 408.898172][T16031] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 408.898185][T16031] RBP: 00007f184b92f090 R08: 0000000000000000 R09: 0000000000000000 [ 408.898198][T16031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 408.898210][T16031] R13: 00007f184ac16038 R14: 00007f184ac15fa0 R15: 00007ffda6b537f8 [ 408.898245][T16031] [ 409.739120][T16058] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 410.527341][T16091] FAULT_INJECTION: forcing a failure. [ 410.527341][T16091] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 410.565885][T16091] CPU: 1 UID: 0 PID: 16091 Comm: syz.1.2505 Not tainted syzkaller #0 PREEMPT(full) [ 410.565915][T16091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 410.565927][T16091] Call Trace: [ 410.565936][T16091] [ 410.565945][T16091] dump_stack_lvl+0xe8/0x150 [ 410.565975][T16091] should_fail_ex+0x412/0x560 [ 410.566004][T16091] _copy_from_iter+0x1d3/0x1670 [ 410.566031][T16091] ? rcu_is_watching+0x15/0xb0 [ 410.566103][T16091] ? __pfx__copy_from_iter+0x10/0x10 [ 410.566134][T16091] ? netlink_sendmsg+0x650/0xb40 [ 410.566157][T16091] ? skb_put+0x11b/0x210 [ 410.566182][T16091] netlink_sendmsg+0x6c0/0xb40 [ 410.566216][T16091] ? __pfx_netlink_sendmsg+0x10/0x10 [ 410.566244][T16091] ? aa_sock_msg_perm+0xf1/0x1b0 [ 410.566278][T16091] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 410.566309][T16091] ____sys_sendmsg+0x972/0x9f0 [ 410.566333][T16091] ? __might_fault+0xaf/0x130 [ 410.566368][T16091] ? __pfx_____sys_sendmsg+0x10/0x10 [ 410.566401][T16091] ? import_iovec+0x73/0xa0 [ 410.566429][T16091] ___sys_sendmsg+0x2a5/0x360 [ 410.566451][T16091] ? __lock_acquire+0x6b5/0x2cf0 [ 410.566479][T16091] ? __pfx____sys_sendmsg+0x10/0x10 [ 410.566542][T16091] ? __fget_files+0x2a/0x420 [ 410.566566][T16091] ? __fget_files+0x3a0/0x420 [ 410.566603][T16091] __x64_sys_sendmsg+0x1bd/0x2a0 [ 410.566638][T16091] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 410.566674][T16091] ? __pfx_ksys_write+0x10/0x10 [ 410.566714][T16091] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.566737][T16091] do_syscall_64+0x174/0x580 [ 410.566758][T16091] ? trace_irq_disable+0x3b/0x140 [ 410.566789][T16091] ? clear_bhb_loop+0x40/0x90 [ 410.566815][T16091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.566835][T16091] RIP: 0033:0x7f7aee39ce59 [ 410.566854][T16091] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 410.566871][T16091] RSP: 002b:00007f7aef237028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 410.566893][T16091] RAX: ffffffffffffffda RBX: 00007f7aee615fa0 RCX: 00007f7aee39ce59 [ 410.566908][T16091] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 410.566920][T16091] RBP: 00007f7aef237090 R08: 0000000000000000 R09: 0000000000000000 [ 410.566932][T16091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 410.566944][T16091] R13: 00007f7aee616038 R14: 00007f7aee615fa0 R15: 00007ffcee1e39c8 [ 410.566977][T16091] [ 411.704191][T16124] netlink: 'syz.0.2512': attribute type 2 has an invalid length. [ 412.146747][T16144] netlink: 'syz.2.2516': attribute type 1 has an invalid length. [ 412.269723][T16138] bridge_slave_0: left allmulticast mode [ 412.288812][T16138] bridge_slave_0: left promiscuous mode [ 412.312641][T16138] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.355079][T16138] bridge_slave_1: left allmulticast mode [ 412.396653][T16138] bridge_slave_1: left promiscuous mode [ 412.414900][T16138] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.483691][T16138] bond4: (slave veth0_to_bond): Releasing active interface [ 412.499784][T16138] veth0_to_bond: left promiscuous mode [ 412.507541][T16138] veth0_to_bond: left allmulticast mode [ 412.546671][T16138] team0: Port device team_slave_0 removed [ 412.587529][T16138] team0: Port device team_slave_1 removed [ 412.616220][T16138] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 412.644041][T16138] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 412.668138][T16138] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 412.685665][T16138] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 412.716315][T16138] bond2: (slave veth3): Releasing active interface [ 412.741343][T16138] bond2: (slave veth3): the permanent HWaddr of slave - ee:fa:af:96:fe:a7 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 412.772002][T16138] batadv1: entered promiscuous mode [ 412.804601][T16138] bond2: (slave batadv1): Releasing active interface [ 412.823318][T16138] batadv1: left promiscuous mode [ 412.848887][T16138] bond8: (slave bridge6): Releasing backup interface [ 412.865836][T16138] bridge6: left promiscuous mode [ 412.964837][T16144] team0: Port device xfrm0 added [ 412.995462][T16156] tipc: Enabled bearer , priority 0 [ 413.147310][T16155] netlink: 'syz.4.2515': attribute type 9 has an invalid length. [ 413.481034][T16203] __nla_validate_parse: 1 callbacks suppressed [ 413.481055][T16203] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2527'. [ 413.562640][T16203] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2527'. [ 413.636520][T16213] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 8 [ 414.114225][T16234] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2533'. [ 414.826927][T16271] netlink: 'syz.4.2539': attribute type 13 has an invalid length. [ 414.878547][T16279] tipc: Can't bind to reserved service type 2 [ 415.350980][T16291] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2542'. [ 415.363089][T16291] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 415.616634][T16304] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2546'. [ 415.659869][T16308] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2545'. [ 415.790189][T16315] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2549'. [ 415.794786][T16313] syzkaller1: entered promiscuous mode [ 415.804943][T16313] syzkaller1: entered allmulticast mode [ 415.916616][T16319] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2549'. [ 415.994029][T16327] netlink: 'syz.0.2550': attribute type 1 has an invalid length. [ 416.013642][T16315] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 416.051332][T16327] 8021q: adding VLAN 0 to HW filter on device bond9 [ 416.132701][T16332] 8021q: VLANs not supported on ip_vti0 [ 416.161710][T16321] bond9: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 416.223677][T16327] bond9: entered promiscuous mode [ 416.232722][T16327] bond9: entered allmulticast mode [ 416.554599][T16361] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2560'. [ 416.571182][T16364] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2561'. [ 416.639512][T16364] siw: device registration error -23 [ 416.770013][T16363] ip6gretap0 speed is unknown, defaulting to 1000 [ 417.735814][T16371] netlink: 'syz.2.2563': attribute type 9 has an invalid length. [ 417.926218][T16408] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 418.036006][T16401] 8021q: adding VLAN 0 to HW filter on device bond10 [ 418.509378][T16432] __nla_validate_parse: 5 callbacks suppressed [ 418.509396][T16432] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2574'. [ 418.547509][T16434] netlink: 596 bytes leftover after parsing attributes in process `syz.0.2575'. [ 418.563523][T16426] ip6gretap0 speed is unknown, defaulting to 1000 [ 418.578994][T16434] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2575'. [ 419.329490][T16466] FAULT_INJECTION: forcing a failure. [ 419.329490][T16466] name failslab, interval 1, probability 0, space 0, times 0 [ 419.382337][T16466] CPU: 0 UID: 0 PID: 16466 Comm: syz.2.2584 Not tainted syzkaller #0 PREEMPT(full) [ 419.382367][T16466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 419.382381][T16466] Call Trace: [ 419.382389][T16466] [ 419.382398][T16466] dump_stack_lvl+0xe8/0x150 [ 419.382430][T16466] should_fail_ex+0x412/0x560 [ 419.382460][T16466] should_failslab+0xa8/0x100 [ 419.382483][T16466] ? skb_clone+0x212/0x3a0 [ 419.382607][T16466] kmem_cache_alloc_noprof+0x87/0x650 [ 419.382646][T16466] skb_clone+0x212/0x3a0 [ 419.382675][T16466] __netlink_deliver_tap+0x404/0x850 [ 419.382713][T16466] ? netlink_deliver_tap+0x2e/0x1b0 [ 419.382739][T16466] netlink_deliver_tap+0x19c/0x1b0 [ 419.382765][T16466] netlink_sendskb+0x68/0x140 [ 419.382789][T16466] netlink_rcv_skb+0x2b6/0x4b0 [ 419.382814][T16466] ? __pfx_genl_rcv_msg+0x10/0x10 [ 419.382846][T16466] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 419.382886][T16466] ? down_read+0x270/0x2e0 [ 419.382960][T16466] ? genl_rcv+0xd/0x40 [ 419.382989][T16466] genl_rcv+0x28/0x40 [ 419.383013][T16466] netlink_unicast+0x75c/0x8e0 [ 419.383044][T16466] netlink_sendmsg+0x813/0xb40 [ 419.383077][T16466] ? __pfx_netlink_sendmsg+0x10/0x10 [ 419.383103][T16466] ? aa_sock_msg_perm+0xf1/0x1b0 [ 419.383135][T16466] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 419.383166][T16466] ____sys_sendmsg+0x972/0x9f0 [ 419.383188][T16466] ? __might_fault+0xaf/0x130 [ 419.383222][T16466] ? __pfx_____sys_sendmsg+0x10/0x10 [ 419.383253][T16466] ? import_iovec+0x73/0xa0 [ 419.383280][T16466] ___sys_sendmsg+0x2a5/0x360 [ 419.383300][T16466] ? __lock_acquire+0x6b5/0x2cf0 [ 419.383324][T16466] ? __pfx____sys_sendmsg+0x10/0x10 [ 419.383384][T16466] ? __fget_files+0x2a/0x420 [ 419.383407][T16466] ? __fget_files+0x3a0/0x420 [ 419.383447][T16466] __x64_sys_sendmsg+0x1bd/0x2a0 [ 419.383475][T16466] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 419.383509][T16466] ? __pfx_ksys_write+0x10/0x10 [ 419.383555][T16466] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.383578][T16466] do_syscall_64+0x174/0x580 [ 419.383598][T16466] ? trace_irq_disable+0x3b/0x140 [ 419.383628][T16466] ? clear_bhb_loop+0x40/0x90 [ 419.383653][T16466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.383674][T16466] RIP: 0033:0x7f39fc39ce59 [ 419.383693][T16466] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 419.383710][T16466] RSP: 002b:00007f39fd296028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 419.383732][T16466] RAX: ffffffffffffffda RBX: 00007f39fc615fa0 RCX: 00007f39fc39ce59 [ 419.383747][T16466] RDX: 0000000000004000 RSI: 0000200000000980 RDI: 0000000000000003 [ 419.383759][T16466] RBP: 00007f39fd296090 R08: 0000000000000000 R09: 0000000000000000 [ 419.383770][T16466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 419.383782][T16466] R13: 00007f39fc616038 R14: 00007f39fc615fa0 R15: 00007ffff726c208 [ 419.383815][T16466] [ 419.875500][T16480] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2588'. [ 420.397660][T16487] pim6reg0: tun_chr_ioctl cmd 35111 [ 420.513652][T16510] FAULT_INJECTION: forcing a failure. [ 420.513652][T16510] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 420.552087][T16510] CPU: 0 UID: 0 PID: 16510 Comm: syz.1.2598 Not tainted syzkaller #0 PREEMPT(full) [ 420.552116][T16510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 420.552129][T16510] Call Trace: [ 420.552137][T16510] [ 420.552145][T16510] dump_stack_lvl+0xe8/0x150 [ 420.552174][T16510] should_fail_ex+0x412/0x560 [ 420.552203][T16510] _copy_to_user+0x31/0xb0 [ 420.552320][T16510] simple_read_from_buffer+0xe1/0x170 [ 420.552352][T16510] proc_fail_nth_read+0x1bb/0x230 [ 420.552405][T16510] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 420.552436][T16510] ? rw_verify_area+0x2a6/0x4d0 [ 420.552465][T16510] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 420.552495][T16510] vfs_read+0x20c/0xa70 [ 420.552530][T16510] ? __pfx___mutex_lock+0x10/0x10 [ 420.552561][T16510] ? __pfx_vfs_read+0x10/0x10 [ 420.552592][T16510] ? __fget_files+0x2a/0x420 [ 420.552623][T16510] ? __fget_files+0x3a0/0x420 [ 420.552647][T16510] ? __fget_files+0x2a/0x420 [ 420.552682][T16510] ksys_read+0x150/0x270 [ 420.552723][T16510] ? __pfx_ksys_read+0x10/0x10 [ 420.552762][T16510] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.552786][T16510] do_syscall_64+0x174/0x580 [ 420.552807][T16510] ? trace_irq_disable+0x3b/0x140 [ 420.552839][T16510] ? clear_bhb_loop+0x40/0x90 [ 420.552865][T16510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.552885][T16510] RIP: 0033:0x7f7aee35d68e [ 420.552905][T16510] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 420.552922][T16510] RSP: 002b:00007f7aef236fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 420.552944][T16510] RAX: ffffffffffffffda RBX: 00007f7aef2376c0 RCX: 00007f7aee35d68e [ 420.552959][T16510] RDX: 000000000000000f RSI: 00007f7aef2370a0 RDI: 0000000000000007 [ 420.552971][T16510] RBP: 00007f7aef237090 R08: 0000000000000000 R09: 0000000000000000 [ 420.552991][T16510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 420.553003][T16510] R13: 00007f7aee616038 R14: 00007f7aee615fa0 R15: 00007ffcee1e39c8 [ 420.553038][T16510] [ 420.850475][T16512] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 420.911177][T16515] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2602'. [ 420.923150][T16515] netlink: 220 bytes leftover after parsing attributes in process `syz.1.2602'. [ 420.939208][T16515] netlink: 'syz.1.2602': attribute type 2 has an invalid length. [ 421.028589][T16524] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2605'. [ 421.379967][T16540] siw: device registration error -23 [ 421.415994][T16544] xfrm0: entered allmulticast mode [ 421.429879][T16544] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 421.469672][T16548] x_tables: duplicate underflow at hook 3 [ 421.598338][T16562] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2615'. [ 421.852842][T16565] sock: sock_timestamping_bind_phc: sock not bind to device [ 421.904609][T16573] netlink: 'syz.3.2617': attribute type 1 has an invalid length. [ 422.088224][T16573] netlink: 'syz.3.2617': attribute type 10 has an invalid length. [ 422.112256][T16573] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2617'. [ 422.223503][T16579] bond9: (slave veth1): Enslaving as an active interface with a down link [ 422.279060][T16583] bond9: (slave dummy0): making interface the new active one [ 422.295065][T16583] bond9: (slave dummy0): Enslaving as an active interface with an up link [ 422.306317][T16573] dummy0: entered promiscuous mode [ 422.329702][T16573] bond9: (slave dummy0): Releasing active interface [ 422.448845][T16585] ip6gretap0 speed is unknown, defaulting to 1000 [ 422.571780][T16604] netlink: 'syz.0.2624': attribute type 1 has an invalid length. [ 423.039379][T16626] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2631'. [ 423.075976][T16628] netlink: 'syz.3.2632': attribute type 1 has an invalid length. [ 423.173825][T16628] bond10: entered promiscuous mode [ 423.181761][T16628] 8021q: adding VLAN 0 to HW filter on device bond10 [ 423.478906][T16628] bond10: (slave veth11): making interface the new active one [ 423.501944][T16628] veth11: entered promiscuous mode [ 423.525274][T16628] bond10: (slave veth11): Enslaving as an active interface with an up link [ 423.691650][T16652] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 423.748956][T16657] __nla_validate_parse: 1 callbacks suppressed [ 423.748976][T16657] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2641'. [ 423.770461][T16658] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 423.817766][T16652] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 423.880220][T16652] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 423.899382][T16660] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2642'. [ 423.915084][T16660] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2642'. [ 423.926328][T16652] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 423.967221][T16651] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 424.025674][T16665] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2644'. [ 424.105473][T16668] bond10: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 424.119267][T16668] bond10 (unregistering): Released all slaves [ 424.127710][T16673] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2647'. [ 424.258161][T16678] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2648'. [ 424.346941][T16681] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 424.375169][T16681] netlink: 'syz.2.2649': attribute type 2 has an invalid length. [ 424.398617][T16681] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2649'. [ 424.981593][T16693] ip6gretap0 speed is unknown, defaulting to 1000 [ 425.269397][T16725] netlink: 124 bytes leftover after parsing attributes in process `syz.2.2662'. [ 425.854513][T16742] syzkaller0: entered promiscuous mode [ 425.868841][T16742] syzkaller0: entered allmulticast mode [ 425.885206][T16742] tipc: Resetting bearer [ 426.139318][T16751] Unknown options in mask 6 [ 426.183149][T16752] ip6gretap0 speed is unknown, defaulting to 1000 [ 426.194633][T16755] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2671'. [ 426.379812][ T30] audit: type=1804 audit(1780571779.368:7): pid=16760 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2673" name="/newroot/547/cgroup.controllers" dev="tmpfs" ino=2818 res=1 errno=0 [ 426.461921][ T30] audit: type=1800 audit(1780571779.368:8): pid=16760 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2673" name="cgroup.controllers" dev="tmpfs" ino=2818 res=0 errno=0 [ 426.606243][T16769] netlink: 'syz.3.2675': attribute type 13 has an invalid length. [ 426.656313][T16769] netlink: 'syz.3.2675': attribute type 17 has an invalid length. [ 426.900107][T16781] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2675'. [ 426.938615][T16769] dummy0: left promiscuous mode [ 427.065406][T16769] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 427.203846][T16795] tipc: Enabled bearer , priority 0 [ 427.213988][T16795] syzkaller0: entered promiscuous mode [ 427.220247][T16795] syzkaller0: entered allmulticast mode [ 427.254707][T16795] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 427.289604][T16795] tipc: Resetting bearer [ 427.310544][T16794] tipc: Resetting bearer [ 427.357663][T16794] tipc: Disabling bearer [ 427.608495][T16805] netlink: 'syz.4.2683': attribute type 7 has an invalid length. [ 427.616912][T16802] netlink: 'syz.0.2682': attribute type 2 has an invalid length. [ 427.638133][T16805] netlink: 'syz.4.2683': attribute type 8 has an invalid length. [ 427.640651][T16802] netlink: 'syz.0.2682': attribute type 1 has an invalid length. [ 427.674558][T16810] netlink: 'syz.4.2683': attribute type 1 has an invalid length. [ 427.764886][T16814] netlink: 'syz.1.2686': attribute type 1 has an invalid length. [ 427.879347][T16814] 8021q: adding VLAN 0 to HW filter on device bond5 [ 427.919011][T16817] bond5: (slave macvlan0): Enslaving as an active interface with a down link [ 429.120637][T16878] __nla_validate_parse: 6 callbacks suppressed [ 429.120658][T16878] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2706'. [ 429.527011][T16900] sctp: [Deprecated]: syz.3.2711 (pid 16900) Use of struct sctp_assoc_value in delayed_ack socket option. [ 429.527011][T16900] Use struct sctp_sack_info instead [ 429.858264][T16912] ip6gretap0 speed is unknown, defaulting to 1000 [ 429.897056][T16917] netlink: 'syz.3.2713': attribute type 29 has an invalid length. [ 429.909559][T16913] batman_adv: batadv0: Interface activated: vlan2 [ 429.930298][T16917] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2713'. [ 429.976698][T16922] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2714'. [ 429.991480][T16913] 8021q: adding VLAN 0 to HW filter on device bond0 [ 430.001407][T16874] netlink: 'syz.2.2705': attribute type 9 has an invalid length. [ 430.013963][T16913] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 430.047530][T16913] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 430.859823][T16952] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2724'. [ 430.888682][T16952] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2724'. [ 431.079842][T16955] ip6gretap0 speed is unknown, defaulting to 1000 [ 431.170832][T16960] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 431.290255][T16969] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2728'. [ 431.336176][T16969] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2728'. [ 431.374181][T16969] netlink: 45 bytes leftover after parsing attributes in process `syz.0.2728'. [ 431.583034][T16977] ip6gretap0 speed is unknown, defaulting to 1000 [ 431.942595][T16980] ip6gretap0 speed is unknown, defaulting to 1000 [ 432.399078][T17000] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2735'. [ 432.606039][T16982] netlink: 'syz.3.2731': attribute type 9 has an invalid length. [ 432.921650][T17005] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2735'. [ 433.073866][T17002] netlink: 'syz.4.2736': attribute type 9 has an invalid length. [ 433.250803][T17019] netlink: 'syz.2.2739': attribute type 4 has an invalid length. [ 433.302157][T17022] netlink: 'syz.2.2739': attribute type 4 has an invalid length. [ 433.786804][T17049] tipc: Enabling of bearer rejected, already enabled [ 433.899847][ T5634] block nbd5: Receive control failed (result -1) [ 434.133296][T17068] FAULT_INJECTION: forcing a failure. [ 434.133296][T17068] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 434.168477][T17068] CPU: 0 UID: 0 PID: 17068 Comm: syz.3.2751 Not tainted syzkaller #0 PREEMPT(full) [ 434.168506][T17068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 434.168519][T17068] Call Trace: [ 434.168527][T17068] [ 434.168536][T17068] dump_stack_lvl+0xe8/0x150 [ 434.168566][T17068] should_fail_ex+0x412/0x560 [ 434.168594][T17068] _copy_from_user+0x2d/0xb0 [ 434.168621][T17068] ___sys_sendmsg+0x1c6/0x360 [ 434.168645][T17068] ? __lock_acquire+0x6b5/0x2cf0 [ 434.168674][T17068] ? __pfx____sys_sendmsg+0x10/0x10 [ 434.168734][T17068] ? __fget_files+0x2a/0x420 [ 434.168759][T17068] ? __fget_files+0x3a0/0x420 [ 434.168795][T17068] __x64_sys_sendmsg+0x1bd/0x2a0 [ 434.168822][T17068] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 434.168856][T17068] ? __pfx_ksys_write+0x10/0x10 [ 434.168895][T17068] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.168918][T17068] do_syscall_64+0x174/0x580 [ 434.168940][T17068] ? trace_irq_disable+0x3b/0x140 [ 434.168970][T17068] ? clear_bhb_loop+0x40/0x90 [ 434.168996][T17068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.169017][T17068] RIP: 0033:0x7f184a99ce59 [ 434.169037][T17068] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 434.169055][T17068] RSP: 002b:00007f184b92f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 434.169077][T17068] RAX: ffffffffffffffda RBX: 00007f184ac15fa0 RCX: 00007f184a99ce59 [ 434.169092][T17068] RDX: 0000000000004000 RSI: 0000200000000980 RDI: 0000000000000003 [ 434.169105][T17068] RBP: 00007f184b92f090 R08: 0000000000000000 R09: 0000000000000000 [ 434.169118][T17068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 434.169130][T17068] R13: 00007f184ac16038 R14: 00007f184ac15fa0 R15: 00007ffda6b537f8 [ 434.169172][T17068] [ 434.470465][T17079] __nla_validate_parse: 8 callbacks suppressed [ 434.470502][T17079] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2752'. [ 434.613606][T17082] geneve3: entered promiscuous mode [ 434.652001][T17082] geneve3: entered allmulticast mode [ 434.678951][ T1180] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20003 - 0 [ 434.700435][ T1180] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20003 - 0 [ 434.725203][ T1180] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20003 - 0 [ 434.745000][T17087] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2756'. [ 434.808529][T17091] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2755'. [ 435.081752][T17101] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993 [ 435.165287][T17108] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2763'. [ 435.190628][T17108] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2763'. [ 435.201011][T17104] syzkaller1: entered promiscuous mode [ 435.213064][T17104] syzkaller1: entered allmulticast mode [ 435.403368][T17120] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2766'. [ 435.450124][T17120] gtp1: entered promiscuous mode [ 435.463733][T17120] gtp1: entered allmulticast mode [ 435.819311][T17136] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 435.872461][T17136] tipc: Enabling of bearer rejected, already enabled [ 436.020092][T17140] can: request_module (can-proto-3) failed. [ 436.066237][T17140] netlink: 'syz.3.2772': attribute type 4 has an invalid length. [ 436.153088][T17146] netlink: 'syz.3.2772': attribute type 4 has an invalid length. [ 436.319616][T17160] ip6gre1: entered promiscuous mode [ 436.342214][T17160] ip6gre1: entered allmulticast mode [ 436.467180][T17166] xfrm0: left allmulticast mode [ 436.491760][T17166] mac80211_hwsim hwsim10 wlan0: left promiscuous mode [ 436.502033][T17166] mac80211_hwsim hwsim10 wlan0: left allmulticast mode [ 436.519518][T17166] vlan3: left allmulticast mode [ 436.524752][T17166] bond4: left allmulticast mode [ 436.536433][T17170] SET target dimension over the limit! [ 436.610301][T17169] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2779'. [ 436.628368][T17169] netlink: 'syz.2.2779': attribute type 21 has an invalid length. [ 436.645320][T17169] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2779'. [ 436.664472][T17169] netlink: 'syz.2.2779': attribute type 4 has an invalid length. [ 436.681596][T17169] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2779'. [ 436.898484][T17182] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20000 [ 436.974975][T17186] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2786'. [ 437.257793][ T58] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 437.306856][ T6501] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 437.316371][ T58] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 437.330342][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056ef0000: rx timeout, send abort [ 437.374466][T17199] hsr_slave_0: left promiscuous mode [ 437.416806][T17199] hsr_slave_1: left promiscuous mode [ 437.466513][T17215] netlink: 'syz.1.2794': attribute type 6 has an invalid length. [ 437.479914][T17215] netlink: 'syz.1.2794': attribute type 5 has an invalid length. [ 437.489746][T17215] netlink: 'syz.1.2794': attribute type 6 has an invalid length. [ 437.497899][T17217] netlink: 'syz.2.2795': attribute type 3 has an invalid length. [ 437.510562][T17215] netlink: 'syz.1.2794': attribute type 5 has an invalid length. [ 437.673423][ T6503] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 437.692537][ T6503] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 437.772499][T17227] 8021q: VLANs not supported on wg0 [ 437.838711][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056ef0000: abort rx timeout. Force session deactivation [ 438.121449][T17243] [ 438.123862][T17243] ====================================================== [ 438.130905][T17243] WARNING: possible circular locking dependency detected [ 438.137973][T17243] syzkaller #0 Not tainted [ 438.142424][T17243] ------------------------------------------------------ [ 438.149460][T17243] syz.2.2804/17243 is trying to acquire lock: [ 438.155560][T17243] ffffffff8ea85600 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_cache_noprof+0x40/0x660 [ 438.164912][T17243] [ 438.164912][T17243] but task is already holding lock: [ 438.172290][T17243] ffff888039b30fe0 (k-sk_lock-AF_INET6/1){+.+.}-{0:0}, at: mptcp_subflow_create_socket+0x142/0x800 [ 438.183135][T17243] [ 438.183135][T17243] which lock already depends on the new lock. [ 438.183135][T17243] [ 438.193557][T17243] [ 438.193557][T17243] the existing dependency chain (in reverse order) is: [ 438.202621][T17243] [ 438.202621][T17243] -> #7 (k-sk_lock-AF_INET6/1){+.+.}-{0:0}: [ 438.210738][T17243] lock_sock_nested+0x41/0x100 [ 438.216059][T17243] mptcp_subflow_create_socket+0x142/0x800 [ 438.222425][T17243] __mptcp_nmpc_sk+0x155/0x790 [ 438.227816][T17243] mptcp_setsockopt+0x10ff/0x3520 [ 438.233440][T17243] do_sock_setsockopt+0x17c/0x1b0 [ 438.239008][T17243] __x64_sys_setsockopt+0x13d/0x1b0 [ 438.244746][T17243] do_syscall_64+0x174/0x580 [ 438.249889][T17243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.256322][T17243] [ 438.256322][T17243] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 438.264088][T17243] lock_sock_nested+0x41/0x100 [ 438.269397][T17243] inet_shutdown+0x6a/0x390 [ 438.274593][T17243] nbd_mark_nsock_dead+0x2e9/0x560 [ 438.280353][T17243] recv_work+0x1c2e/0x1d40 [ 438.285312][T17243] process_scheduled_works+0xb5d/0x1860 [ 438.291419][T17243] worker_thread+0xa53/0xfc0 [ 438.296553][T17243] kthread+0x389/0x470 [ 438.301180][T17243] ret_from_fork+0x514/0xb70 [ 438.306390][T17243] ret_from_fork_asm+0x1a/0x30 [ 438.311840][T17243] [ 438.311840][T17243] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 438.319532][T17243] __mutex_lock+0x1a3/0x1550 [ 438.324682][T17243] nbd_queue_rq+0x37b/0x1100 [ 438.329829][T17243] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 438.336014][T17243] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 438.342935][T17243] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 438.349458][T17243] blk_mq_run_hw_queue+0x348/0x4f0 [ 438.355145][T17243] blk_mq_dispatch_list+0xd16/0xe10 [ 438.360891][T17243] blk_mq_flush_plug_list+0x48d/0x570 [ 438.366804][T17243] __blk_flush_plug+0x3ed/0x4d0 [ 438.372275][T17243] __submit_bio+0x28d/0x580 [ 438.377344][T17243] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 438.383532][T17243] block_read_full_folio+0x7b7/0x830 [ 438.389412][T17243] filemap_read_folio+0x137/0x3b0 [ 438.395017][T17243] do_read_cache_folio+0x358/0x590 [ 438.400707][T17243] read_part_sector+0xb6/0x2b0 [ 438.406122][T17243] adfspart_check_ICS+0xb1/0x960 [ 438.411619][T17243] bdev_disk_changed+0x817/0x1770 [ 438.417200][T17243] blkdev_get_whole+0x380/0x510 [ 438.422702][T17243] bdev_open+0x31e/0xd30 [ 438.427486][T17243] blkdev_open+0x470/0x610 [ 438.432444][T17243] do_dentry_open+0x822/0x13a0 [ 438.437761][T17243] vfs_open+0x3b/0x340 [ 438.442387][T17243] path_openat+0x2e08/0x3860 [ 438.447582][T17243] do_file_open+0x23e/0x4a0 [ 438.452638][T17243] do_sys_openat2+0x113/0x200 [ 438.457858][T17243] __x64_sys_openat+0x138/0x170 [ 438.463255][T17243] do_syscall_64+0x174/0x580 [ 438.468388][T17243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.474827][T17243] [ 438.474827][T17243] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 438.482066][T17243] __mutex_lock+0x1a3/0x1550 [ 438.487199][T17243] nbd_queue_rq+0xc6/0x1100 [ 438.492248][T17243] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 438.498334][T17243] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 438.505206][T17243] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 438.511733][T17243] blk_mq_run_hw_queue+0x348/0x4f0 [ 438.517387][T17243] blk_mq_dispatch_list+0xd16/0xe10 [ 438.523135][T17243] blk_mq_flush_plug_list+0x48d/0x570 [ 438.529044][T17243] __blk_flush_plug+0x3ed/0x4d0 [ 438.534433][T17243] __submit_bio+0x28d/0x580 [ 438.539484][T17243] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 438.545655][T17243] block_read_full_folio+0x7b7/0x830 [ 438.551486][T17243] filemap_read_folio+0x137/0x3b0 [ 438.557061][T17243] do_read_cache_folio+0x358/0x590 [ 438.562717][T17243] read_part_sector+0xb6/0x2b0 [ 438.568021][T17243] adfspart_check_ICS+0xb1/0x960 [ 438.573495][T17243] bdev_disk_changed+0x817/0x1770 [ 438.579072][T17243] blkdev_get_whole+0x380/0x510 [ 438.584484][T17243] bdev_open+0x31e/0xd30 [ 438.589286][T17243] blkdev_open+0x470/0x610 [ 438.594250][T17243] do_dentry_open+0x822/0x13a0 [ 438.599560][T17243] vfs_open+0x3b/0x340 [ 438.604169][T17243] path_openat+0x2e08/0x3860 [ 438.609315][T17243] do_file_open+0x23e/0x4a0 [ 438.614366][T17243] do_sys_openat2+0x113/0x200 [ 438.619587][T17243] __x64_sys_openat+0x138/0x170 [ 438.624985][T17243] do_syscall_64+0x174/0x580 [ 438.630122][T17243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.636556][T17243] [ 438.636556][T17243] -> #3 (set->srcu){.+.+}-{0:0}: [ 438.643704][T17243] __synchronize_srcu+0xca/0x300 [ 438.649179][T17243] elevator_switch+0x1e8/0x7a0 [ 438.654491][T17243] elevator_change+0x2cc/0x450 [ 438.659796][T17243] elevator_set_default+0x36c/0x430 [ 438.665542][T17243] blk_register_queue+0x3e9/0x4e0 [ 438.671119][T17243] __add_disk+0x677/0xd50 [ 438.675995][T17243] add_disk_fwnode+0xfb/0x480 [ 438.681221][T17243] nbd_dev_add+0x72c/0xb50 [ 438.686183][T17243] nbd_init+0x168/0x1f0 [ 438.691002][T17243] do_one_initcall+0x250/0x870 [ 438.696307][T17243] do_initcall_level+0x104/0x190 [ 438.701856][T17243] do_initcalls+0x59/0xa0 [ 438.706740][T17243] kernel_init_freeable+0x2a6/0x3e0 [ 438.712625][T17243] kernel_init+0x1d/0x1d0 [ 438.717521][T17243] ret_from_fork+0x514/0xb70 [ 438.722672][T17243] ret_from_fork_asm+0x1a/0x30 [ 438.728021][T17243] [ 438.728021][T17243] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 438.735876][T17243] __mutex_lock+0x1a3/0x1550 [ 438.741031][T17243] elevator_change+0x1b3/0x450 [ 438.746355][T17243] elevator_set_none+0xb5/0x140 [ 438.751766][T17243] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 438.758125][T17243] nbd_start_device+0x17f/0xb10 [ 438.763549][T17243] nbd_genl_connect+0x165b/0x1cf0 [ 438.769125][T17243] genl_family_rcv_msg_doit+0x22a/0x330 [ 438.775223][T17243] genl_rcv_msg+0x61c/0x7a0 [ 438.780277][T17243] netlink_rcv_skb+0x232/0x4b0 [ 438.785581][T17243] genl_rcv+0x28/0x40 [ 438.790109][T17243] netlink_unicast+0x75c/0x8e0 [ 438.795414][T17243] netlink_sendmsg+0x813/0xb40 [ 438.800716][T17243] ____sys_sendmsg+0x972/0x9f0 [ 438.806019][T17243] ___sys_sendmsg+0x2a5/0x360 [ 438.811238][T17243] __x64_sys_sendmsg+0x1bd/0x2a0 [ 438.816727][T17243] do_syscall_64+0x174/0x580 [ 438.821872][T17243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.828315][T17243] [ 438.828315][T17243] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 438.836963][T17243] blk_alloc_queue+0x546/0x680 [ 438.842273][T17243] __blk_mq_alloc_disk+0x197/0x390 [ 438.847934][T17243] nbd_dev_add+0x499/0xb50 [ 438.852896][T17243] nbd_init+0x168/0x1f0 [ 438.857603][T17243] do_one_initcall+0x250/0x870 [ 438.862922][T17243] do_initcall_level+0x104/0x190 [ 438.868427][T17243] do_initcalls+0x59/0xa0 [ 438.873318][T17243] kernel_init_freeable+0x2a6/0x3e0 [ 438.879091][T17243] kernel_init+0x1d/0x1d0 [ 438.883989][T17243] ret_from_fork+0x514/0xb70 [ 438.889139][T17243] ret_from_fork_asm+0x1a/0x30 [ 438.894463][T17243] [ 438.894463][T17243] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 438.901723][T17243] __lock_acquire+0x15a5/0x2cf0 [ 438.907152][T17243] lock_acquire+0x106/0x350 [ 438.912217][T17243] fs_reclaim_acquire+0x71/0x100 [ 438.917710][T17243] __kmalloc_cache_noprof+0x40/0x660 [ 438.923553][T17243] ref_tracker_alloc+0x15a/0x4c0 [ 438.929126][T17243] get_net_track+0x16e/0x230 [ 438.934260][T17243] sk_net_refcnt_upgrade+0xb2/0x130 [ 438.940004][T17243] mptcp_subflow_create_socket+0x32b/0x800 [ 438.946409][T17243] __mptcp_nmpc_sk+0x155/0x790 [ 438.951726][T17243] mptcp_pm_nl_add_addr_doit+0xe25/0x1420 [ 438.957990][T17243] genl_family_rcv_msg_doit+0x22a/0x330 [ 438.964089][T17243] genl_rcv_msg+0x61c/0x7a0 [ 438.969142][T17243] netlink_rcv_skb+0x232/0x4b0 [ 438.974452][T17243] genl_rcv+0x28/0x40 [ 438.978982][T17243] netlink_unicast+0x75c/0x8e0 [ 438.984298][T17243] netlink_sendmsg+0x813/0xb40 [ 438.989607][T17243] ____sys_sendmsg+0x972/0x9f0 [ 438.994918][T17243] ___sys_sendmsg+0x2a5/0x360 [ 439.000232][T17243] __x64_sys_sendmsg+0x1bd/0x2a0 [ 439.005712][T17243] do_syscall_64+0x174/0x580 [ 439.010849][T17243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.017464][T17243] [ 439.017464][T17243] other info that might help us debug this: [ 439.017464][T17243] [ 439.027716][T17243] Chain exists of: [ 439.027716][T17243] fs_reclaim --> sk_lock-AF_INET6 --> k-sk_lock-AF_INET6/1 [ 439.027716][T17243] [ 439.040966][T17243] Possible unsafe locking scenario: [ 439.040966][T17243] [ 439.048433][T17243] CPU0 CPU1 [ 439.053814][T17243] ---- ---- [ 439.059200][T17243] lock(k-sk_lock-AF_INET6/1); [ 439.064088][T17243] lock(sk_lock-AF_INET6); [ 439.071143][T17243] lock(k-sk_lock-AF_INET6/1); [ 439.078545][T17243] lock(fs_reclaim); [ 439.082552][T17243] [ 439.082552][T17243] *** DEADLOCK *** [ 439.082552][T17243] [ 439.090715][T17243] 4 locks held by syz.2.2804/17243: [ 439.095927][T17243] #0: ffffffff8fe392e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 439.104154][T17243] #1: ffffffff8fe39120 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 439.113159][T17243] #2: ffff888054f16860 (msk_lock-AF_INET6){+.+.}-{0:0}, at: mptcp_pm_nl_add_addr_doit+0xdc7/0x1420 [ 439.123980][T17243] #3: ffff888039b30fe0 (k-sk_lock-AF_INET6/1){+.+.}-{0:0}, at: mptcp_subflow_create_socket+0x142/0x800 [ 439.135159][T17243] [ 439.135159][T17243] stack backtrace: [ 439.141115][T17243] CPU: 0 UID: 0 PID: 17243 Comm: syz.2.2804 Not tainted syzkaller #0 PREEMPT(full) [ 439.141135][T17243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 439.141153][T17243] Call Trace: [ 439.141161][T17243] [ 439.141169][T17243] dump_stack_lvl+0xe8/0x150 [ 439.141202][T17243] print_circular_bug+0x2e1/0x300 [ 439.141227][T17243] check_noncircular+0x12e/0x150 [ 439.141252][T17243] __lock_acquire+0x15a5/0x2cf0 [ 439.141270][T17243] ? genl_rcv_msg+0x61c/0x7a0 [ 439.141293][T17243] ? netlink_rcv_skb+0x232/0x4b0 [ 439.141310][T17243] ? genl_rcv+0x28/0x40 [ 439.141331][T17243] ? ____sys_sendmsg+0x972/0x9f0 [ 439.141349][T17243] ? ___sys_sendmsg+0x2a5/0x360 [ 439.141365][T17243] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 439.141382][T17243] ? do_syscall_64+0x174/0x580 [ 439.141398][T17243] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.141420][T17243] ? __kmalloc_cache_noprof+0x40/0x660 [ 439.141444][T17243] lock_acquire+0x106/0x350 [ 439.141460][T17243] ? __kmalloc_cache_noprof+0x40/0x660 [ 439.141489][T17243] fs_reclaim_acquire+0x71/0x100 [ 439.141513][T17243] ? __kmalloc_cache_noprof+0x40/0x660 [ 439.141537][T17243] __kmalloc_cache_noprof+0x40/0x660 [ 439.141559][T17243] ? lockdep_hardirqs_on+0x7a/0x110 [ 439.141576][T17243] ? ref_tracker_alloc+0x15a/0x4c0 [ 439.141597][T17243] ref_tracker_alloc+0x15a/0x4c0 [ 439.141616][T17243] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 439.141633][T17243] ? ref_tracker_free+0x522/0x840 [ 439.141652][T17243] ? __pfx_ref_tracker_free+0x10/0x10 [ 439.141669][T17243] ? sk_net_refcnt_upgrade+0x8c/0x130 [ 439.141686][T17243] ? mptcp_subflow_create_socket+0x32b/0x800 [ 439.141833][T17243] ? __mptcp_nmpc_sk+0x155/0x790 [ 439.141860][T17243] ? mptcp_pm_nl_add_addr_doit+0xe25/0x1420 [ 439.141880][T17243] ? genl_family_rcv_msg_doit+0x22a/0x330 [ 439.141911][T17243] ? net_passive_dec+0x177/0x250 [ 439.142018][T17243] ? __pfx_net_passive_dec+0x10/0x10 [ 439.142045][T17243] get_net_track+0x16e/0x230 [ 439.142065][T17243] sk_net_refcnt_upgrade+0xb2/0x130 [ 439.142086][T17243] mptcp_subflow_create_socket+0x32b/0x800 [ 439.142109][T17243] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 439.142132][T17243] ? do_raw_spin_lock+0x12b/0x2f0 [ 439.142155][T17243] ? lock_sock_nested+0x6a/0x100 [ 439.142180][T17243] __mptcp_nmpc_sk+0x155/0x790 [ 439.142202][T17243] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 439.142221][T17243] ? mptcp_pm_nl_add_addr_doit+0xdc7/0x1420 [ 439.142239][T17243] ? __local_bh_enable_ip+0xd0/0x130 [ 439.142257][T17243] mptcp_pm_nl_add_addr_doit+0xe25/0x1420 [ 439.142280][T17243] ? __pfx_mptcp_pm_nl_add_addr_doit+0x10/0x10 [ 439.142310][T17243] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 439.142335][T17243] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 439.142363][T17243] genl_family_rcv_msg_doit+0x22a/0x330 [ 439.142387][T17243] ? __asan_memcpy+0x40/0x70 [ 439.142411][T17243] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 439.142441][T17243] ? bpf_lsm_capable+0x9/0x20 [ 439.142457][T17243] ? security_capable+0x7e/0x2c0 [ 439.142543][T17243] genl_rcv_msg+0x61c/0x7a0 [ 439.142569][T17243] ? __pfx_genl_rcv_msg+0x10/0x10 [ 439.142592][T17243] ? __pfx_mptcp_pm_nl_add_addr_doit+0x10/0x10 [ 439.142609][T17243] ? __pfx_ref_tracker_free+0x10/0x10 [ 439.142631][T17243] netlink_rcv_skb+0x232/0x4b0 [ 439.142650][T17243] ? __pfx_genl_rcv_msg+0x10/0x10 [ 439.142681][T17243] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 439.142705][T17243] ? down_read+0x270/0x2e0 [ 439.142724][T17243] ? genl_rcv+0xd/0x40 [ 439.142747][T17243] genl_rcv+0x28/0x40 [ 439.142768][T17243] netlink_unicast+0x75c/0x8e0 [ 439.142788][T17243] netlink_sendmsg+0x813/0xb40 [ 439.142811][T17243] ? __pfx_netlink_sendmsg+0x10/0x10 [ 439.142831][T17243] ? aa_sock_msg_perm+0xf1/0x1b0 [ 439.142857][T17243] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 439.142881][T17243] ____sys_sendmsg+0x972/0x9f0 [ 439.142899][T17243] ? __might_fault+0xaf/0x130 [ 439.142923][T17243] ? __pfx_____sys_sendmsg+0x10/0x10 [ 439.142945][T17243] ? import_iovec+0x73/0xa0 [ 439.142966][T17243] ___sys_sendmsg+0x2a5/0x360 [ 439.142983][T17243] ? __lock_acquire+0x6b5/0x2cf0 [ 439.143002][T17243] ? __pfx____sys_sendmsg+0x10/0x10 [ 439.143022][T17243] ? futex_wake+0x4ac/0x580 [ 439.143062][T17243] ? __fget_files+0x2a/0x420 [ 439.143082][T17243] ? __fget_files+0x3a0/0x420 [ 439.143106][T17243] __x64_sys_sendmsg+0x1bd/0x2a0 [ 439.143126][T17243] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 439.143148][T17243] ? rcu_is_watching+0x15/0xb0 [ 439.143173][T17243] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.143190][T17243] do_syscall_64+0x174/0x580 [ 439.143207][T17243] ? trace_irq_disable+0x3b/0x140 [ 439.143233][T17243] ? clear_bhb_loop+0x40/0x90 [ 439.143251][T17243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.143269][T17243] RIP: 0033:0x7f39fc39ce59 [ 439.143285][T17243] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 439.143300][T17243] RSP: 002b:00007f39fd296028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 439.143319][T17243] RAX: ffffffffffffffda RBX: 00007f39fc615fa0 RCX: 00007f39fc39ce59 [ 439.143332][T17243] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000008 [ 439.143343][T17243] RBP: 00007f39fc432d6f R08: 0000000000000000 R09: 0000000000000000 [ 439.143353][T17243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 439.143363][T17243] R13: 00007f39fc616038 R14: 00007f39fc615fa0 R15: 00007ffff726c208 [ 439.143382][T17243] [ 439.713253][T17248] __nla_validate_parse: 7 callbacks suppressed [ 439.713273][T17248] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2806'. [ 439.760263][ T30] audit: type=1804 audit(1780571792.748:9): pid=17248 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2806" name="/newroot/559/cgroup.controllers" dev="tmpfs" ino=2879 res=1 errno=0 [ 439.815411][ T30] audit: type=1800 audit(1780571792.748:10): pid=17248 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2806" name="cgroup.controllers" dev="tmpfs" ino=2879 res=0 errno=0 [ 439.837532][ T30] audit: type=1804 audit(1780571792.778:11): pid=17248 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.2806" name="/newroot/559/cgroup.controllers" dev="tmpfs" ino=2879 res=1 errno=0 [ 439.972286][T17250] IPv6: NLM_F_CREATE should be specified when creating new route [ 439.980197][T17250] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 439.987537][T17250] IPv6: NLM_F_CREATE should be set when creating new route [ 441.012088][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!