last executing test programs: 12.133319003s ago: executing program 2 (id=2695): r0 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000180)={{0x3, @null}, [@netrom, @default, @default, @netrom, @null, @bcast, @remote, @netrom]}, &(0x7f0000000040)=0x48, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000200)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={'nr', 0x0}, 0x20005, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x3, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x15}, 0x1c) r1 = socket(0x15, 0x5, 0x0) r2 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_pktinfo(r2, 0x0, 0x50, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000540)=@hci, 0x80, &(0x7f00000000c0)=[{&(0x7f00000003c0)=""/253, 0xfd}], 0x1}, 0x9e79461275f741f7) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00') syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r5, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) unshare(0x2a020480) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) bpf$LINK_DETACH(0x22, &(0x7f00000008c0)=r7, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000040)=ANY=[@ANYBLOB="d8010000", @ANYRES16=r5, @ANYBLOB="010000000000fbdbdf25010000000800050001000000060006004e220000140002007767320000000000000000000000000024000300a0cb87"], 0x1d8}}, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}, {0xffffffffffffffff}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0x66, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60a24b9f00302b00fe8000000000000000000000bbfe8000000000000000000000000000aa3a020201"], 0x0) getsockname$tipc(r1, 0x0, &(0x7f0000000080)) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6(0xa, 0x3, 0x8000000003c) 4.185027249s ago: executing program 3 (id=2776): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001240)=ANY=[@ANYBLOB="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"], 0x1020}}, 0x80) vmsplice(r2, &(0x7f00000004c0)=[{&(0x7f0000000380)="dcd85ea31fa5fd52b4fb45faf0986231017c22552301c7e57b223dac9ecade410dd2bb46cc47093b52f6869e2aa9ac97499987a29bdd470fb9978d8939197fd2216f01e177cb9f1023903129bf8bad57be0cd70b7875ca9db8478b5532d12119fda428eeb965a2940f1a2c0bdbd72fbcf99ec655aa01b3334bd87f6d0fd29fbd604d3803eac133b0f8bf86ba6534568928a90f6d541a3ba0ccf252c11790ec4f04093dce2bc74b2ad62b27930ee5815d8c2cf46118fe0c8ca193855c8bbf490722e5b20ad6c1a1d98293b1052daf8d7a86f3f76a7c4d4e6da61382cf5b", 0xdd}, {&(0x7f0000000480)="91f02dd81534892d44b4c2248ba6162f39b8c611ddcc4187ea7eed5c1958c4caebfb3b64c69f782c600c433c4dcf2f28e5", 0x31}], 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f00000001c0)={0x1, 0x3002}, 0x4) r5 = socket$kcm(0x21, 0x2, 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0x1}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x7d}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x60}}, 0x0) sendmsg$inet(r5, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1c000000000000000000000eb9ee0d00", @ANYRES32=0x0, @ANYBLOB="e000000100000000000000001800000000000000100100000d0000008905313d"], 0x38}, 0x4000880) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getsockopt$sock_buf(r7, 0x1, 0x3d, 0x0, &(0x7f0000000180)) r8 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000711062000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r9, &(0x7f00000001c0)={0xa, 0x40, 0x9, @empty, 0x6}, 0x1c) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, 0x0, 0x0) accept4(r10, 0x0, &(0x7f0000000040), 0x80000) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000000080)="53062172b14730d1384d29c97f10ca31b0a027c2a30c166f5d55fc2e9e1f0fb0446d28b4b4d1df9a309ecdfbec6aeb62516958ec82ce4d521df07166c250c3d323c35b2b8efd5704d9b89a2dd4b0db885d5654bb364c30f2f5853a175f1d06e82c3667e2dd825f6ec016cc2551cf081d719fc87e40afb4b4b4ded486c5152ca2bc7f63c901c15bb2b55e35940ec62ff7", 0x90) r11 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r11, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff810005400e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) bind$inet(r8, &(0x7f0000000280)={0x2, 0x5e21, @local}, 0x10) connect$inet(r8, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000010000104000000000200000000000000", @ANYRES32=r3, @ANYBLOB="0000faffffff000034001280110001006272696467655f736c617665000000001c000580050021000000000006001f"], 0x54}}, 0x0) 3.737612841s ago: executing program 3 (id=2778): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) (rerun: 32) r0 = socket$inet(0x2, 0x2, 0x1) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000600)={'sit0\x00', &(0x7f0000000580)={'tunl0\x00', 0x0, 0x718, 0x80, 0x200, 0x80000001, {{0x5, 0x4, 0x1, 0x0, 0x14, 0x66, 0x0, 0x81, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x31}, @remote}}}}) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000000)={0x11, @broadcast, 0x0, 0x0, 'none\x00', 0x0, 0xfffffffc}, 0x2c) (async) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="60000000100001040100"/20, @ANYRES32=0x0, @ANYBLOB="7b130000000000003800128008000100677470002c00028008000100", @ANYRES32=r3, @ANYRES32], 0x60}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) close(0x3) (async) r5 = socket(0x10, 0x803, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x8c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x18000000}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x8c}}, 0x0) (async) recvmmsg(r1, &(0x7f0000000a40)=[{{&(0x7f00000000c0)=@phonet, 0x80, &(0x7f0000000f80)=[{&(0x7f0000000200)=""/54, 0x36}, {&(0x7f0000002800)=""/4096, 0x1000}, {&(0x7f0000000640)=""/174, 0xae}, {&(0x7f0000000bc0)=""/120, 0x78}, {&(0x7f0000000c40)=""/92, 0x5c}, {&(0x7f0000000cc0)=""/129, 0x81}, {&(0x7f0000000d80)=""/112, 0x70}, {&(0x7f0000000e00)=""/249, 0xf9}, {&(0x7f00000005c0)=""/44, 0x2c}, {&(0x7f0000000f00)=""/112, 0x70}], 0xa, &(0x7f0000000400)=""/126, 0x7e}, 0x5}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000240)=""/64, 0x40}, {&(0x7f0000000480)=""/177, 0xb1}, {&(0x7f0000000340)=""/7, 0x7}, {&(0x7f0000000ac0)=""/224, 0xe0}, {&(0x7f0000000740)=""/252, 0xfc}, {&(0x7f0000000940)=""/243, 0xf3}], 0x6, &(0x7f0000001800)=""/4096, 0x1000}, 0x87d}], 0x2, 0x10121, &(0x7f0000000540)={0x0, 0x3938700}) (async) sendmsg$SMC_PNETID_GET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newlink={0x34, 0x10, 0x437, 0xfffffffc, 0x25dfdbff, {0x0, 0x0, 0x0, r7, 0x67583, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmmsg$inet(r1, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @empty}}}], 0x20}}], 0x1, 0x80) (async) r8 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010010000000ffdbdf2530000000", @ANYRES32=r10, @ANYBLOB="20000000000000001c0012800b0001006d616373656300000c00028005000f"], 0x3c}}, 0x0) 2.917447459s ago: executing program 0 (id=2783): r0 = socket(0x18, 0x0, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x800) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x4, @random="45e3f364e554", 'sit0\x00'}}, 0x1e) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x40600}, 0x0) 2.911499529s ago: executing program 2 (id=2784): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x336) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x60000, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d04000000000000000002000000240001801400018008000100"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r3, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000002980)=""/4098, 0x1002}, {&(0x7f0000000040)=""/6, 0x6}, {&(0x7f00000006c0)=""/219, 0xdb}, {&(0x7f00000008c0)=""/31, 0x1f}, {&(0x7f0000000b00)=""/213, 0xd5}, {&(0x7f0000000c00)=""/193, 0xc1}], 0x6}, 0x80000000}], 0x4, 0x20, 0x0) close(r0) 2.681744733s ago: executing program 2 (id=2787): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000090000003c000380140002007663616e30000000000000000000000014000600ff0500000000000000000000000000010800010001000000080003"], 0x50}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000009c0)="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", 0xfffffdef}], 0x1}}], 0x1, 0x0) sendmsg$AUDIT_DEL_RULE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000840) recvmsg$can_j1939(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x10100) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x128}, 0x24008804) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) getpeername$inet(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000280)=0x10) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = socket$kcm(0x11, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$kcm(r7, &(0x7f0000000080)={&(0x7f0000001340)=@xdp={0x2c, 0x0, r8, 0x6}, 0x80, &(0x7f0000000000)=[{&(0x7f00000004c0)="b8b28225ea772f0daee8c7c98100", 0xe}, {&(0x7f0000000100)="82990806", 0x4}], 0x2}, 0x20000000) ioctl$sock_bt_hci(r6, 0x400448cb, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="400100001000330600000000fcfffffffe8000000000000000000000000000aaffffffff00000000000000000000000000004000000080040000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac14143f0000000030f36531707bd57a3c609f5d000000000000000000000000320000000a0101020000000000000000000000002703000000000000050000000000000000000000000000000400000000000000ff0f00000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000008f000000000000800800000028bd7000000000000a0001000000000000000000080016000600000048000200656362286369706865725f6e756c6c2900"/260], 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) r10 = socket$inet(0x2, 0x2, 0x0) r11 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r11, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r11, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) bind$inet(r10, &(0x7f0000000200)={0x2, 0x4e20, @broadcast}, 0x10) 2.473389818s ago: executing program 0 (id=2789): r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00'], 0x18) (async) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0xd9, 0xfffffffc, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x100000}, 0x1c) 2.353651575s ago: executing program 0 (id=2790): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000013a40)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@delqdisc={0x2c, 0x25, 0x20, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x9, 0xffff}, {0x9, 0xe}, {0xffff, 0x6}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x9}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000080}, 0x0) recvmsg$can_raw(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000200)=""/20, 0x14}, {&(0x7f00000020c0)=""/4063, 0xfdf}], 0x2}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) ioctl$sock_SIOCBRDELBR(r3, 0x89a1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0xff6e, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x84, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x400}, [@NFTA_TABLE_USERDATA={0x0, 0x6, "0872541cadaa332ff3658750b91abc1224e14d07b9ee2ae1932e4cb1e1afe1ff42f26cb535214358469ac0a2215e06065b893b0ef20d8ea3b0f661406f10940bc4bfed5f"}, @NFTA_TABLE_NAME={0x0, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x110, 0x2, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x800a}, [@NFTA_TABLE_FLAGS={0x0, 0x2, 0x1, 0x0, 0x2}]}], {0xfffffffffffffd95, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x1bc}}, 0x0) getsockname$packet(r3, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000400)=@mpls_getroute={0x1c, 0x1a, 0x400, 0x70bd28, 0x25dfdbfd, {0x1c, 0x80, 0x20, 0x7, 0xff, 0x1, 0xfe, 0x8, 0x2600}}, 0x1c}, 0x1, 0x0, 0x0, 0x30000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000880)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, 0x12a13, 0x1a001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x3c}}, 0x20004000) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000040)={0x0, 'wlan0\x00', {0x4}, 0x7}) 2.200368547s ago: executing program 4 (id=2791): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xf, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xf, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000e80)=@raw={'raw\x00', 0x8, 0x3, 0xaa8, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x9d8, 0xffffffff, 0xffffffff, 0x9d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x73, 0x0, 0x0, 0x45}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x43}}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, [], [0x0, 0xffffffff, 0xff000000], 'wg1\x00', 'gre0\x00'}, 0x0, 0x8e0, 0x908, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3fb, 0x0, 0x8}}}, @common=@unspec=@u32={{0x7e0}, {[{[{0x7fff, 0x1}, {0x8, 0x3}, {0xfffff7ec, 0x1}, {0xfff, 0xbd3626e1c8b1df09}, {0x5, 0x2}, {0xb34c, 0x3}, {0x2}, {0xe48b, 0x2}, {0x101, 0x2}, {0x5, 0x2}, {0x5}], [{0x400}, {0x6, 0x8001}, {0x401, 0x40}, {0x7fff}, {0xffffc1b1, 0x32de}, {0xfff, 0x8}, {0x2, 0x9}, {0x1, 0xbbca}, {0x83, 0x1}, {0x5, 0x7}, {0x3}], 0x1, 0x7}, {[{0x9, 0x3}, {0x6, 0x3}, {0x4, 0x3}, {0x1, 0x2}, {0x9, 0x1}, {0xfffffffa}, {0x0, 0x2}, {0x80000000, 0x3}, {0x80000001}, {0x8001, 0x2}, {0xff, 0x3}], [{0x7, 0x5}, {0x3, 0x6b6}, {0x4, 0x400}, {0x3}, {0x4, 0xfff}, {0x3ff, 0xe5d7}, {0x6, 0x3ff}, {0xa78, 0xffffffff}, {0xa9e1, 0x3}, {0x8, 0x1000}, {0xc7, 0xf385}], 0x6, 0x3}, {[{0x101, 0x2}, {0x9}, {0x3, 0x3}, {0x2, 0x3}, {0x48}, {0x9, 0x2}, {0x1, 0x2}, {0x7, 0x2}, {0x9}, {0x7, 0x1}, {0x0, 0x3}], [{0xfffffffb, 0x5}, {0x8, 0xa17}, {0x80, 0x4}, {0x8}, {0x3, 0x7}, {0x5e18, 0x7}, {0x4, 0x101}, {0x7, 0xfff}, {0xd, 0x7f}, {0x2, 0x2}, {0xfb3, 0xa94}], 0xb, 0x4}, {[{0x8, 0x1}, {0x4, 0x2}, {0x4e, 0xc781c4f1f9c1fa4f}, {0x8, 0x1}, {0x4e5, 0x2}, {0x3, 0x3}, {0x6, 0x1}, {0x7, 0x1}, {0x5, 0x2}, {0xfff}, {0x4}], [{0x9, 0x8001}, {0xffff, 0x4}, {0x7fff, 0xf}, {0x66d, 0x9}, {0x92, 0xb}, {0x3, 0x6}, {0x7, 0xfff}, {0x1, 0xff}, {0x1, 0x1}, {0x0, 0x8}, {0x1, 0xff}], 0xa}, {[{0x5, 0x2}, {0x7a3, 0x2}, {0x1, 0x3}, {0x100, 0x3}, {0x40}, {0x8d, 0x1}, {0x8, 0x3}, {0x9, 0x3}, {0x8, 0x2}, {0x1, 0x1}, {0x7}], [{0x854f, 0x6b}, {0x7, 0x7}, {0x6, 0x80}, {0x3, 0xffc00000}, {0x7}, {0x3, 0x6}, {0x2, 0xf17}, {0x25, 0x401}, {0x200, 0x84b}, {0x7fff, 0x80}, {0x3, 0x1}], 0x4, 0x8}, {[{0xc3d, 0x147d12363fe5c40a}, {0x64, 0x1}, {0xf, 0x3}, {0x5, 0x1}, {0x7fffffff, 0x2}, {0x5}, {0x2af0, 0x2}, {0x1bd6, 0x2}, {0x1, 0x2}, {0x7, 0x1}, {0x7, 0x2}], [{0x92b, 0x1ff}, {0x1, 0xf458}, {0x5, 0x3}, {0x84, 0x1}, {0xe923, 0x7fff}, {0x4, 0xe}, {0x3, 0x6}, {0xad3f, 0x59f}, {0x4, 0xfffffffc}, {0x6}, {0x5, 0x6f}], 0x9}, {[{0x8}, {0x2f, 0x1}, {0x7, 0x1}, {0x0, 0x2}, {0x3, 0x3}, {0x0, 0x1}, {0x1, 0x3}, {0x8, 0x3}, {0x7}, {0x2}, {0x2, 0x3}], [{0x101, 0x80000000}, {0x1, 0x9}, {0x40, 0xff}, {0x4, 0x2}, {0x5, 0x6}, {0x2, 0x5}, {0x0, 0x3}, {0xe, 0x5}, {0x6, 0x1ff}, {0xc, 0x7}, {0x1, 0x4}], 0xb, 0x7}, {[{0x8c, 0x1}, {0xd}, {0x10000, 0x2}, {0x8, 0x2}, {0x3, 0x3}, {0x0, 0x3}, {0x1ff, 0x1}, {}, {0xc, 0x1}, {0xf0f}, {0xf629}], [{0x4, 0x5}, {0x35f7, 0x1}, {0x401, 0xf6}, {0x94, 0xd16}, {0x8, 0x5}, {0x35, 0x4929}, {0x8001, 0x5}, {0x1000, 0x9}, {0x9f, 0x65}, {0x9, 0x4}, {0x9, 0xf0a9}], 0x1, 0x4}, {[{0x9, 0x1}, {0x9, 0x2}, {0x7, 0x1}, {0x4, 0x4adbb8db8b6f3087}, {0x3}, {0x3, 0x3}, {0x7ff}, {0x7, 0x1}, {0x10000, 0x3}, {0x0, 0x2}, {0x80000000, 0x1}], [{0xf767, 0x8}, {0xc, 0x5}, {0x9, 0x8}, {0x6, 0xb23}, {0x101, 0x4}, {0xfffffff7, 0xb98}, {0x10001, 0x8f}, {0x9, 0xa83}, {0xd, 0x1}, {0x4, 0xe00}, {0x7, 0x444}], 0x6, 0x4}, {[{0x2, 0x3}, {0x2}, {0x26914786, 0x3}, {0x3}, {0xd7f, 0x1}, {0x7fffffff}, {0xf}, {0x4, 0x2}, {0x8, 0x1}, {0x4, 0x3}, {0xe, 0x1}], [{0xb59, 0x6}, {0x4, 0x70c063f5}, {0x2, 0xfffffffe}, {0x5, 0x6}, {0x10000, 0x872}, {0x6, 0x8}, {0xffff, 0x7}, {0x7, 0x4}, {0x6, 0x10}, {0xfff, 0xa}, {0x81, 0x4}], 0xb, 0x4}, {[{0x200, 0x1}, {0x2, 0x3}, {0xa, 0x1}, {0x3ff, 0x1}, {0x7}, {0x1, 0x2}, {0x6, 0x3}, {0x7}, {0x92, 0x3}, {0x6, 0x1}, {0x7fffffff, 0x2}], [{0x3, 0xbbb9}, {0x4, 0x400}, {0xdec, 0x9}, {0x7, 0x1d}, {0x0, 0x9a}, {0x1, 0x7}, {0x1, 0xf580}, {0x4, 0x9f}, {0x2, 0x4}, {0x5, 0x7}, {0xfff, 0x1}], 0x5, 0x7}], 0x4, 0x1}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x8, 0xff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0xb08) pipe(&(0x7f0000000000)) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000040)={0x4, {{0xa, 0x4e21, 0x5, @loopback, 0xfff}}}, 0x88) 1.901144458s ago: executing program 4 (id=2792): r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000040)) r1 = socket$unix(0x1, 0x5, 0x0) writev(r1, &(0x7f0000000080), 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IEEE802154_START_REQ(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x64, r3, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x7}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x12}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x4}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x2b}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x6}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000054}, 0x4000000) r4 = socket$kcm(0x29, 0x5, 0x0) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000240)="9cf8feeaefd256b6258879e3280b937eefd5a63a0a75e7df07946e4bb81ef84cdd135c71f526fd176dd077c9ee3f57ca9cb2cda6cccb4694ace62740f734f4a4e58e1b7fc0a19e063edb3932254858b76fa15b5f7eefabe4b09c9236d43d174090b2a7bc196a7ef9510f648507f608908009260746612f595243d9a92fcfcc92704c612d320cc209d29a91177bc20b0da5505e9b2afd72b630c6c4799128043e4bb9deae60ca", 0xa6}, {&(0x7f0000000300)="2f64f4ef9081bc8041d921456373353f09e9707bd7735796491bb2fdadae225f4ac73ec587c1a136266b2c59b8014dfac72684c8b1ba126c29734d825f9cf66e41e58fe877f9c5a01b62c7e14f2b876f0cbd9456ed6f0c7420fb2d11bbe7da2852fca99d6d0def15776f7331abe2da0568dbb0462e1981e50c986232fc59f7238c0826f6ec13468385929ad3651c22baa56b6c180642", 0x96}, {&(0x7f00000003c0)="d7c319020acfea18e3bf0b8bfff023c8a548c739d27181af6ebe021c90bca489b36b14f1d755aca4b34408243ab5ac697fdf1801e1a169681761cc6db5653530f2dfae0e1b4312b8b810c580add7697760869d80c4c2c073fb75e0b4c4835e45188c4f10dccd3f783a57695bf8e61a889f18a648030d66b5dbe264e6168b98851e9cc75beb0a6624f2bfb80ff623f0d856b513bb20a6296bf80dd8eb6aae4c5bcb75", 0xa2}, {&(0x7f0000000480)="14ba8c60ecd6fb0fa7af56eaa0fad9cfaa3f45a9fe3eef61364122", 0x1b}], 0x4) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x800008, 0x8870, r0, 0xbd880000) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f0000001540)={0x1, 0x3, 0x1000, 0x22, &(0x7f0000000500)="b2951b1df0f7fafa9297c9959b80924ac3bde0fbd1deea1aef6b62007017c808da74", 0x1000, 0x0, &(0x7f0000000540)="4e71e13205a12337511703d6beaaf4a3c82939f9af45ba25926584f621283c86029df9a620be396c3324baa4977cfbf48d6ad2ae0e95819c8999c245b9822441541ccb3ae2d96c779694bf8d64fdf7b53d4d40ce218f84a16670520688c2d6c5f340ba8274d0e4f910ffaaf7f6721aef4bda7e06f115db3a5a618e054a6a7c2566daa33a998ebfabe1781a433398c98b9c9fe3f089c00f106c63bf67abe78c839740dcfa2f3849bc4c650c6a353124a247e7012918c709b5ed1359c2941d5a8c0d975b96d1c42b77b86e777a3bc043eb585eba588f522f3791af35f60741841c9d46e1c9087fe12946135896e340fef7f560d5abd9c6e317818d2aadf6b939f3f46bf240e5587547f39d5ba2adda2238d3f4dd4d4b0be4a286f3efc6f0c1b5c38de00df9043a44ab485b0bcdbd5afaae08b20cb8a83d4ef511bdd726b8885350a0311d17b733cf3648f318a15eba64c5aabd332d07508ed2acc6869e3b73183ac7f6055093a13c5c0aded0d9a409869885673c30632894675855183747064fe82fc415d66f4c0ec155e200a6ab936d898c1bb5869e7fa54b446796b70a8f84d3f2c192a2a998b6320045ba757b670833ac0239ead21ba2f708a83182136e4c395cd447ed0013d6b06444fdf9bd6ded05cc534059d4c12562b8da5dadd0911ddae5d86ca3f3482849db465d6fd46879793159b09252239520ca85efd1b8388e1dd29ab0eafa7b47cdfdf59ee86b8d588e69fb543f729770c95ca7f7ccbb12c27435962d410d762973dc4fe975633136a9a8ad4b1fcd3e6ce0946b0ea0e8db4af2a80344a3823ed8ce875c819506b35a323bbb218979b8a4e7ff51cd8da774d2b2378cef39ce2a87dfeaaf9d45492f17e16401f0b5954ec6cec28fd5f201e19089367f0d5cee9c95c88b13f9afb442fbdd520272246bf0e8975b1727b929cfd4c2a65756985f0bf63bdf03f4fbb40245c220328fb3312e391da2534b4237512cfc746785adbab614b2f7b3a027f42d5e9813dada3902db4d3011f2494764399353e06f8edae8946c07dad31e9046991dba7ac9c9f663025894ad9bad095760eb10ba0e54e0ca9be0e186d6f02402dddad605d4c4c8b2033134e057b83206c5196626c49126039e0f2838d421338dfffe1ad3efeebd933daeba221245f0b6e74ed4f08977539fae67b3f3ed01f2e1e6d340537dae1e696556595cb109784f3fa74e9d2dfb06e2efff98855af47b67c9aca6a714d93b44b3cd0dd3da768d06fef3a5c172faf4f0d9f90f2acd5c924cfc8f983b4237b6993c91a6856339b13807929c0e70192a573a27318a74b986738d957f7fda845de8eddea30266a1306fcd3d0db8268223546e8a44fb732cf04bbeeab263b097e8d64e1d6c080febe72e44158e5c29b14985109da2131299f5dbd1c31f6f95f52d598ddfb06e708a2920ca6d0f7b0c6c728e1a3559d9671128705f939713f3f927fb6d93e98ab85803934f1636aa4dc2c4db88b39578dd5075a0f3cae5b9661e65e72900c8039581f2c4abd9e4f34092e206bc868a00808219582f60802ea11bc97734cf3138e3beba2a6f04a6da0368a89ab133534ffa9a7405a8ce104af16d6e9d52b85c3f7c27af8e2a3ee23cd556e7b16d26aa5cbc4fd9bf3da79c520c92c7325cba8d7a386e446e96ee379b80e6baf5720b190207f83f65923acd572ffa92e2fc212682580160fa463fcd0b6f13538870ccc8539fabea6086aea10ea8db17711b3c4cd3d0652dd2dc472032710d85856c17a97f01be9f2929216890cf4d1c3a6ea8f9ba3bcbc2c4b0936977c62e543850c9bfb4636c3f2b658c8e410abf9ea0c837d8ad25aa48799d5b07ff98a1b3dd0f1f8a9c2adf4d30f2e72a118486c49f29b9c588c225b4af3347aa55474106fa5430db9b2126c78ce16553aebc36f6e55f503326ae8ad97943401b8e8281e665571656072908c19704450a7a9ecb1aabcbe513aa072da1391e0ef4d5db17710cad7af13061b0b5ae8d4411d12b92e924602849bca1ac05c00e129826ca6031769a10ae7b7c2a502b41d742b44a9e4f1f4ccb67cb0b7f487f0ce1d7fb5236dc82e294a68077d4682aa7ece7e1e5ab5806557da0a2ca2db2e8532b7014099dcbf16a2a661a3063b22a617482636928a6c216129d0cb8b3f6a7bcc530d9aafaa55661a0336d73c13f4f5a2f1344fb23174216f3cb255693db0c687245b5c32e130c2b0c334cd916f6066350bfb896817802fb7c279988110d9246804453c2ce0cd53dcccdd721b700867252b7404b759a94d9059f4c264b4692f9f0e1601a2fc4101ab92a9b37d7fb390ddb540f87a97c53f841a00e602c9b10ad3bf0573c63a7a35f605ef0fb7dcd950404c85bf341ff9b0d757e86b253746088723851640e99a5abea29c93fba0435218e40394194d76546cb49913a3754bf30e7b1451df3380153a01a62658084f04e1d2bc969c0d42f3b3ed323a8266392688929bc38cd5cc62dffda5cf2a4edf090ef7e7ca6d1d028acf8a59f8974d2491898100249231e19ce2f15a405f81888e1891c60d33ddca27887238c6ed3bb868f273b83584fac870fdf476bd141f361bb0a81ee91db9f2f4878e003b207e8d24e848231c51b06e419a5fb2958283a37b4ae1114a1de087b7e368608a3e37cb01adcc97d6fa0adea5d99b902b86576ac1f8832ec1fb8d08d47f36650458051989515daecb03b878c7382ddcaeead5d8df8d74c74dd0102d05d24e82016b02c00dcaf5a109cfa3c53cbe9119fac7ae056c6dc20f5875af3f9f6df11d854193448763d1dc2ba28f92f7b9cd37299fbce58053a615011379f03e6664b228f07b9a3fe42f206e0dbcd81aa2c6f35d35dd5f0d77a5a554f21f1bdee76bc7c08f865fb02281549ddd8476a385a7322c9d9a013205a4d5aa199436ae436fa21244d772569b9856f96b0bfbf361f089a60d7fe62727609212eb0560205af821199842a478c2b1e8a8c5dcc0a59af92106764314a46d1e7ec5a6cde1df7b6b1b4dc4fcff6fce487bb0e47356a1bb1a3f9c9e232d6e02d20c5a186e2c4de28be0f969372df1f643df51a33c4fb9a7b3f40673b86b5e855ce706d293d83089b1c66dcfb3fa30e3c2b0f42ead6409c2afc09d716369e5293efa685378e16586a3537ebf30cd947a73c3a244c6b0db2217a48af4f524223ca4ca56b367bf1701caa339f350c7c94f5919eb3b8dafe644457469f5c9cbea8c69ee548df76dbf628b3228848bd5e6210cbbe63e8c79ca81840fb360d2e878a426157ddb53d8d3681ebae591d98d0fbd2a06a4ed99a960aff9860a1a83ec5429582ef2f6adffafd0a43b0c1c46a66ec9c3241ee8b778301df0b74b58674ba370ba8c55b5c857802ff4e1c8539ae4ae356d430107885ac4d0d5bb7adf5d8b18019455bf8eae9aef13e3d12cd8468c1fe1cb179154d0ef1a325948f518af52eeaa053ced1b9620d737a7ef147500dd5396a87938c740e572804c4758e1733f4521f50ccee4a65557622329fec53c6517b1c115f463222ecaf116ded9d629f2b6279935bf2f4dab3001872bfc800e8e857feb7fce0f3c2ee744ee698e0fcc20454e06a6f9fb68838234c646df7cb5c786d02d63be0843241c407c8609c689f843a8205531957e1be7bb9f094146b55a4c4a7051c80d7e4b92a09f485aa28769e0a5d23b1a2eddd80fd552128675b4c3c08349b63cafdeb89266d3f170d96b442e147f18163e04865f9be5b146d1a8277e34d54859da3c7bed3762118f5254dcea531b175c953e26ae2482e7f05241a426a0688db0bb7a91fcefad89eeacbe7db37073ddf296b4f13a026362d137bd1825a082bdf2b9dc4bcbd068ae656789a54a62056e1ff6a91050edab9a1c45d0d30d9dadb5e1324b480061a1cfb821f29a77e9ce2b2e529f700156d2104811041be909f6fad8fb7f0742e4059d9fb4fb5d03d256f25261e76cb8a90b5c29420a0d14080f0ac5976f6256220563c832e6aaf0c5da95c726f9a8aacfa3fb353a842e72b77bd29a0846494dff6019fe367ad796f104c7152fbc855d6d43c93bab6a50a949bfbd6697dec41c5549cc184031af403a71ae44340d8e2b1da8fc860cbf51752ac06556a2b7cf07e39ba92219ba10db945a5313adb31fd40bf257b358ef648a1459b004f63eaed6a7ba8d02843ea5cd7ecf5b846eab2a72911aa9a625532d4786a492c6ba0ee51f3ac9becb48836098d03ce873cb116c6bb0c220f2004c37dab7a5166598417de12699166969d0f8e491e35d349fcd2a6bf442dea80ebe127c33015f700f31b9b26a9fd728e773e2b5fe36e4067f1c564eead32a0290924ee3bc4b9fb9934759ecf4e0643d9c814f3f0914cdef7bfcb6d4894bf438f4a7fe6cc1ebcef8e945b499c1ae8dc15f3d3a561bed2b01e7a3765ad51b5ca9fcb500577260d2d6415ea3da4bc6d1d907dbbf9ebfe0b9b8df2b50f8e2ac2938de17c87f7dae2fb6876829dea793a2c31ff502f9a58001fac4ce9f8a96ececffe774065b4bf6125091f955b063444cfa3ac2c00a6c4f73eed2ce4e8428ba3102b7480f391734fc0b63273d9156929b8301798131b6aecad0db306e80f4ec0080636ff1956e2886b2b036fe93ddd2417356dd368ae5cf01bba3ceff92641e9978bb0df7995d2fa408bf31ca0a198e317b668c7192f01103e625007bcc15cd711ee60fa99348bc39ade2bad826a79938819c35dcb0f92a6b8662b39837888efcaa1e7f8edcdcbf06002ac40d28764904263b9f2fe82aed0a219859571b7be1e6aed57b26445d06c62670fef65a5062ab119559c8d2be64b334bdae074ce597f023d304efb7adbaa641184181730e56646c1f79189e5a036556a03012f97292d8dd574e77ba65781a1a411e0c8eeab0db136abf0af760130b421d2756b3042c7ff8649b7c19ca19b61bbda6ea93ddf4d27144568839bac5792008f1425b3a5318984262eebc022bf56d889a48422cae1e2a3a743b95ffc13c3475c00afa862585aa62bb674ae4a5d3f7ea52a5975cf1111da750db6658a8b402b3d9b46b24b32466de93c3f83792e7bdf51a1fa685c488b992469889c0313ff4bf5f2698f8d89b38ddc41084661f9ff3d7d094ced0aee8568b076410c039f395dd553ff17b44f102e44e1b52e97a5d1963420bb1ab431ace12c831247b411d4542d73dd12d7a654ba3e44d852e4e2e567c178b0c2d49c59ca52243f8dc6baa223dcf160acef28f69140dd5da7a290c5eac64c9d4980064281a819483a7907a01cdb778e19a475ad7d86b168d6832e94c90b0f1a289e5f577c4142a2bfa73c285371eafcd3ff72da0991cd605e7da7c008832cfe9eedd16389d455c943c1426ca2c1824ef3f099df59e30df878c0211de3dcb807e4ed31fc07d22c5c39a5884a6b628e6de518e03d855a699f29b54b41739f17b1afdb04635d05fc58a96f263b2fe63ab14929654fc2983ec06a256f3e02bbdf2f46b3a5be216145ef65367cb43c2d77308ed6a1793647290b1406442a2d7a75f498fbcc0578f55d11b73ed608219ef1e218f1c51f0cdcc5b89d0a4ef0ff02afde56a660c018170a546bf89d4910a145f138b29f3e41c240f10b7d27bd4e63af79c53c328cb0833e600c7845a94b7f37035b67eaf39a330d5e19a6db6faf0b411d9444558f031a14dd4f22b77a6eaa7fdd73a7a19d88cb3dbc7e6a0c4eac6c881ae13a4534d29b1ab30094d312c30ab2c428cc7ba6d77050fc20c562e67e838971fa00a1cf8b4a9383f9a87442ef5948e94aabecb845be94c9fed406"}) r5 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000015c0)='cgroup.procs\x00', 0x2, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000001600)=0x0) write$cgroup_pid(r5, &(0x7f0000001640)=r6, 0x12) socketpair(0x23, 0x6, 0x7ff, &(0x7f0000001680)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001700), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001740)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r7, &(0x7f0000001980)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001940)={&(0x7f0000001780)={0x1ac, r9, 0x300, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x4c, 0x11d, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x10}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x50}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xde}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xe8}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xec}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x40}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x144, 0x11d, 0x0, 0x1, [{0x6c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x44, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x32, 0x2, [{0x6, 0x4}, {0x3, 0xa}, {0x2, 0x4}, {0x7, 0x4}, {0x2, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x0, 0x2}, {0x0, 0x3}, {0x1, 0x1}, {0x0, 0x7}, {0x5, 0xa}, {0x0, 0xa}, {0x5, 0x5}, {0x0, 0x7}, {0x1, 0x1}, {0x3, 0x3}, {0x7, 0x9}, {0x0, 0x5}, {0x3, 0x8}, {0x4, 0x2}, {0x6, 0x8}, {0x7, 0x1}, {0x4, 0x5}, {0x5, 0x4}, {0x1, 0x6}, {0x6, 0x7}, {0x6, 0x6}, {0x3, 0x9}, {0x7, 0x7}, {0x7, 0x6}, {0x1, 0x3}, {0x6, 0xa}, {0x1, 0x6}, {0x3, 0xa}, {0x7}, {0x6, 0x2}, {0x4, 0x3}, {0x0, 0x7}, {0x4, 0x7}, {0x3, 0xa}, {0x1, 0x7}, {0x5, 0x9}, {0x3, 0xa}, {0x7}, {0x1, 0x7}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x95}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xea}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc9}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x86}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}, {0x50, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x25}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0xf}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}]}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x81}, 0x4000) syz_genetlink_get_family_id$nfc(&(0x7f00000019c0), r2) connect$bt_l2cap(r7, &(0x7f0000001a00)={0x1f, 0x100, @none, 0x4, 0x1}, 0xe) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$RDMA_NLDEV_CMD_SET(r8, &(0x7f0000001b00)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a80)={0x18, 0x1402, 0x300, 0x70bd2b, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x6004000}, 0x10) r11 = getuid() sendmsg$nl_xfrm(r8, &(0x7f0000001c80)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x80004400}, 0xc, &(0x7f0000001c40)={&(0x7f0000001b80)=@updpolicy={0xc0, 0x19, 0x100, 0x800, 0x25dfdbfc, {{@in=@rand_addr=0x64010100, @in=@loopback, 0x4e21, 0xfff8, 0x4e24, 0x63, 0x2, 0xa0, 0x80, 0x29, 0x0, r11}, {0xfffffffffffffff8, 0x0, 0x5, 0x7, 0x2, 0x3, 0x6, 0x4}, {0xb, 0x3, 0x80000000, 0x4}, 0x1, 0x0, 0x2, 0x1, 0x2}, [@replay_thresh={0x8, 0xb, 0x2}]}, 0xc0}, 0x1, 0x0, 0x0, 0x20004011}, 0x4000000) getsockopt$inet_mreqn(r7, 0x0, 0x20, &(0x7f0000001cc0)={@multicast1, @local, 0x0}, &(0x7f0000001d00)=0xc) sendmsg$can_j1939(r8, &(0x7f0000001e80)={&(0x7f0000001d40)={0x1d, r12, 0x2, {0x2, 0xff, 0x1}, 0x1}, 0x18, &(0x7f0000001e40)={&(0x7f0000001d80)="f6eb37b5bc3c3278520c67dbb357bc34fa08f4bf9cf02b46dcb1568ac5611fb27f68ce2f52b51c0f7bf2179181cc6d6b7310228c5fa15f8002cfb698f216e532f79f1f83c7053277a41c40d07954c25e5c5e0bf897e471d72641bacea1f1b74960cc404765b4f3ed4e0583c4d48fedc7b767877fe4620a1331fab05b7f83696406cd6af32532bb276752f29dc6221ea78868c0ed54b89eb5a3", 0x99}}, 0x4000000) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001f00), r8) sendmsg$ETHTOOL_MSG_COALESCE_SET(r7, &(0x7f0000002000)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x24200204}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001f40)={0x74, r13, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_TX_USECS={0x8, 0x6, 0x7}, @ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8, 0x12, 0x8001}, @ETHTOOL_A_COALESCE_RX_USECS={0x8}, @ETHTOOL_A_COALESCE_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}]}, 0x74}, 0x1, 0x0, 0x0, 0xc0}, 0x40000) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000002040)={0x4, 0x1, 0x3f29d899, 0xfff, 0x0}, &(0x7f0000002080)=0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r8, 0x84, 0x6c, &(0x7f00000020c0)={r14, 0x2, "986b"}, &(0x7f0000002100)=0xa) 1.899457876s ago: executing program 2 (id=2793): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000200)=0x8) close(r0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x70, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2005}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e23}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @empty}, @IFLA_IPTUN_ENCAP_LIMIT={0x5, 0x6, 0x8}]}}}, @IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r2}}}}]}, 0x70}, 0x1, 0xba01, 0x0, 0x20000080}, 0x4044000) 1.633143568s ago: executing program 2 (id=2794): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$alg(0x26, 0x5, 0x0) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TLS_TX(r5, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x304}, "1770e235285db2cb", "278aa3520f3a0ff8cef6713fa6b703a6", "610cde48", "dbb0e9ddc00c20ee"}, 0x28) setsockopt$inet_int(r5, 0x0, 0x18, &(0x7f0000000100)=0x1008001, 0x4) (async) setsockopt$inet_int(r5, 0x0, 0x18, &(0x7f0000000100)=0x1008001, 0x4) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca3", 0x4}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000180)='iocost_ioc_vrate_adj\x00', r2}, 0x18) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r6, &(0x7f0000000080)={0x24, @short={0x2, 0x0, 0xaaa2}}, 0x14) (async) bind$802154_dgram(r6, &(0x7f0000000080)={0x24, @short={0x2, 0x0, 0xaaa2}}, 0x14) bind$packet(r0, &(0x7f0000000000)={0x11, 0x5, 0x0, 0x1, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}}, 0x14) (async) bind$packet(r0, &(0x7f0000000000)={0x11, 0x5, 0x0, 0x1, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}}, 0x14) accept4$inet(r0, &(0x7f0000000200)={0x2, 0x0, @empty}, &(0x7f00000002c0)=0x10, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r1}, &(0x7f00000003c0), &(0x7f0000000400)=r0}, 0x20) splice(r7, 0x0, r0, 0x0, 0x4ffe6, 0x8) (async) splice(r7, 0x0, r0, 0x0, 0x4ffe6, 0x8) 1.622461841s ago: executing program 4 (id=2795): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x68, 0x14, 0xf0b, 0xfffffffe, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, {0xd, 0xd}, {0xfff1, 0x6}, {0x3}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}}, {0x4}}, {{0x1c, 0x1, {0xc, 0x4, 0x8, 0x487, 0x1, 0x81, 0xd}}, {0x4}}]}]}, 0x68}}, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a80016000a0001400d000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbeebe63", 0xda}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100000}, [@ldst={0x1, 0x2, 0x2, 0x2, 0x1, 0x29}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='freezer.self_freezing\x00', 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000480)={'veth0\x00', &(0x7f00000003c0)=@ethtool_rx_ntuple={0x35, {0xe, @ah_ip4_spec={@remote, @broadcast, 0x10000, 0x5}, @hdata="e243d7fd9c419ab702e3b779bf49db70759e2ede5b242c3979465fa9e0a038b39fd7c2dc0b4e1f27ed901740783005940d356237678467f6f3136c37f2cc98893f91de1ba5f4ef9c", 0x5, 0x8, 0x5, 0x4b1, 0xfffffffffffffffe}}}) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00', 0xfffffffe}) r4 = socket$rxrpc(0x21, 0x2, 0xa) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00', 0x4}}}, 0x108) setsockopt$inet6_group_source_req(r5, 0x29, 0x2c, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0xa4ffffff, @empty}}}, 0x108) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x0, 0x0, 0x88000008, 0x6}, 0x4}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x64}}, 0x0) ioctl(r4, 0x8b21, &(0x7f0000000040)) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000580)=ANY=[@ANYBLOB="38010000100001000000000000000000e0000002000000000000000000000000fe88000000000000000000000000000100000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff020000000000000000000000000001800000006c000000fe8000000000000000000000000000bb000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff00000000000000015900000000000000feffffff00000000000000000000000000000000020000000000000000000000480003006465666c61746500"/240], 0x138}}, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r3, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="20e82cbd7000fedbdf2549000000"], 0x14}}, 0x8001) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="8500000055000000040000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r8, &(0x7f0000003a00)=[{{&(0x7f0000000580)={0xa, 0x20, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000200)="c5df6a", 0x3}], 0x1}}, {{&(0x7f0000000b40)={0xa, 0x4e21, 0x900000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}, 0x1c, &(0x7f0000001600)=[{&(0x7f0000000e40)="af", 0x1}], 0x1}}], 0x2, 0xc0c0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r8, 0x84, 0xf, 0x0, &(0x7f0000000000)) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="80000000000201040000000000000000020000002400028014000180080001000000000008000d00ac1e00010c00028005000100000000002400038014000180080001000000000008000200ac1414000c0002800500010000000000240001"], 0x80}}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) connect$can_bcm(r5, &(0x7f00000006c0), 0x10) sendmsg$nl_route(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000005003d"], 0x28}}, 0x4004) 1.601766584s ago: executing program 3 (id=2796): r0 = socket$kcm(0x10, 0x5, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x10) 1.428971708s ago: executing program 2 (id=2797): r0 = socket(0x2a, 0x2, 0x0) ioctl$F2FS_IOC_COMPRESS_FILE(r0, 0xf518, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newqdisc={0x6c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xa, 0x8000}}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x0, 0x29c5, 0x6, 0x1, 0x3574, 0xffffffff}}, {0x4}}]}]}, 0x6c}}, 0x4008000) unshare(0x68040200) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x80000) sendto$x25(r2, &(0x7f0000000080), 0x0, 0x8000, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) write$tun(0xffffffffffffffff, 0x0, 0xffe) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001940)={0x11, 0x20, &(0x7f00000014c0)=@raw=[@exit, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0xd}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x3}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffc}}, @alu={0x4, 0x0, 0xc, 0x7, 0xb, 0x1, 0x4}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x1}, @map_val={0x18, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x400}, @snprintf, @jmp={0x5, 0x0, 0x8, 0xa, 0x3, 0x6, 0xfffffffffffffffc}], &(0x7f00000015c0)='GPL\x00', 0x80, 0xb8, &(0x7f0000001600)=""/184, 0x0, 0x54, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x10, 0x9, 0x1}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000018c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001900)=[{0x3, 0x5, 0xc, 0x1}, {0x3, 0x1, 0x2, 0x2}, {0x1, 0x2, 0x7, 0x7}, {0x5, 0x1, 0xd, 0x6}], 0x10, 0x8, @void, @value}, 0x94) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010026bd7000000000250400000000018008000100", @ANYRES32=0x0, @ANYBLOB], 0x20}}, 0x20040810) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r4) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmmsg$unix(r6, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r6, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) connect$inet(r6, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x4}}], {0x14}}, 0xa4}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}, {0x85, 0x0, 0x0, 0x71}}]}, 0x0, 0x0, 0xffffffffffffff10, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='percpu_create_chunk\x00', r8, 0x0, 0x80000000}, 0x13) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x48) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, 0x0, 0x20000007) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180028ff997b647d1f78b4295700aa0000000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000200)='contention_begin\x00', r9}, 0x10) 1.427507836s ago: executing program 3 (id=2798): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$inet6_int(r2, 0x29, 0x3e, 0x0, &(0x7f00000000c0)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000500)={0x3c, r6, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_CQM={0x20, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x4}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x2}, @NL80211_ATTR_CQM_TXE_PKTS={0x4b, 0x6, 0x2}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x4ad}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x4004000) readv(r3, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/243, 0xfffffdef}], 0x1) write$cgroup_subtree(r4, &(0x7f0000000700)=ANY=[], 0xfe33) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, 0x0, &(0x7f00000004c0)) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000040)={0x0, 0xa, 0xfff, 0x7cef, 0x20000000, 0xfffffffe}, &(0x7f0000000080)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="16000000000000000400000005000000f1000600"/32, @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRESDEC=r4, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1, 0xc, &(0x7f00000004c0)=@framed={{}, [@printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x71}}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r10, 0x0, 0x4, 0x8, &(0x7f00000002c0)="0000ffff", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYRES16=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendto(r0, &(0x7f00000001c0)="d010f2a0932cc724af7114d8d570be057d0b21b246fa21740bcb9e70f6d8e4b9ad3089194205ac9a", 0x28, 0x4004, &(0x7f0000000540)=@sco={0x1f, @none}, 0x80) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000cc000000850000007d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r12 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r12, 0x10d, 0xfb, &(0x7f0000000000), &(0x7f0000000280)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r11}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1200000002000000040000000200000000000000", @ANYRES32, @ANYBLOB="00197b009d000312e675cfdd6db800"/24, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x19, 0x0, 0x0, &(0x7f0000000340)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) 1.353334723s ago: executing program 0 (id=2800): socket$netlink(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$tipc(r0, &(0x7f00000001c0)=@id, &(0x7f0000000240)=0x10) r1 = socket$netlink(0x10, 0x3, 0x14) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="016e0000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x1, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300)) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000490001002bbd7000000000000a"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0) r8 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet6(r8, &(0x7f0000001e40)=[{{&(0x7f00000000c0)={0xa, 0x4e24, 0x57, @local, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=[@tclass={{0x14, 0x29, 0x43, 0x316b}}], 0x18}}], 0x1, 0x4000000) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, 0x15, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x8004) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x37de6c8a68769c38, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 1.284652491s ago: executing program 4 (id=2801): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) (async) r0 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 64) r1 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) unshare(0x2040400) (async) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003000500000000", 0x39}], 0x1) (async) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x10c, r2, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x10}, {0x6, 0x11, 0x40}, {0x8, 0x15, 0xa}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x800}, {0x6, 0x11, 0x6}, {0x8, 0x15, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xb36}, {0x6, 0x11, 0x3}, {0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x1874}, {0x8, 0x15, 0x6}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x8000}, 0x14) 1.185383826s ago: executing program 1 (id=2802): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000002010100000800000000000a00000004000180040003803c0002800c000280050001003a0000002c00018014000300"], 0x58}}, 0x0) (async) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000002010100000800000000000a00000004000180040003803c0002800c000280050001003a0000002c00018014000300"], 0x58}}, 0x0) 1.010587738s ago: executing program 1 (id=2803): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000700)=0x400, 0x4) socket$alg(0x26, 0x5, 0x0) (async) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-aesni)\x00'}, 0x58) (async) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000019c0)=[{&(0x7f0000001a00)="ce", 0x1}], 0x1, 0x1) (async) vmsplice(r3, &(0x7f00000019c0)=[{&(0x7f0000001a00)="ce", 0x1}], 0x1, 0x1) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x8, 0x70bd26, 0x25dfdbfb}, 0x14}}, 0x20008004) splice(r2, 0x0, r1, 0x0, 0x8000, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000740), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r7, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="e000000010000b0500000000000200006f6d8864d22a3f2ffaa46c88bcbd0000002b0ebfe735a3184f1b3d6da2e1acfac0ee50d2b184b27db1f302de337c0004060000000000bf852c89867f66"], 0xe0}], 0x1}, 0x0) (async) sendmsg$netlink(r7, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="e000000010000b0500000000000200006f6d8864d22a3f2ffaa46c88bcbd0000002b0ebfe735a3184f1b3d6da2e1acfac0ee50d2b184b27db1f302de337c0004060000000000bf852c89867f66"], 0xe0}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff"], 0x48) bind$can_j1939(r5, &(0x7f0000000100)={0x1d, r6, 0x0, {0x0, 0x0, 0x4}, 0x1}, 0x18) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) ioctl$INCFS_IOC_FILL_BLOCKS(r4, 0x80106720, &(0x7f0000000280)={0x5, &(0x7f00000017c0)=[{0x5, 0xab, &(0x7f0000000440)="0b261f304dfe15cc14d8cfaf0ef3b430e1267d97cbbc1e064d75e942332d36063252aac054fa194c0e5536ae5a0c3885369f128f05f9e976a7fa3e6092d4b10ca9bdd59fbb7ff2478ed0a77134a0306caa7aeb768403c8b229fe051c1c707a2750c9ad3abe81a11db1340109e9dc5191c0103a5d1a9c38ed665b9e289efb26ca1f31238c79c2b93d1d6721a9a858954e7b596621db540a865660cf47aa40ea69e083a32c284e31ed89c30c", 0x1, 0x1}, {0x1ff, 0xa2, &(0x7f0000000300)="80f22d041f789e1d2ee5abb18ec170129ca90892e5b1fc13882d2a297c3564192f8ffd32cb2d56a24a1ce072ad1938dbfcb06295ff5eeb15295c21b05db3c2e8f17d1c3579a45471a3a2a5670707df38a5b5e35107dfc83894fcf1909cb873d41e1550f55e175d1fc884d98906b8122d925ff8328ff089d7697e95a3af7cd80f9bcd704d9da5ed25105500ae255f616876873a6ad8fc6b57a6835e5973d5b18b8b7b", 0x0, 0x1}, {0x2, 0x35, &(0x7f0000000180)="73a02635e10f3f76f86f58d0280c71a26d020ee0c58e524212ac8190dde51b7d418db14f6af68cbfcaffb89e91e1fc26309f4b5e1d"}, {0xe, 0x0, 0x0, 0x0, 0x1}, {0x1, 0x0, &(0x7f0000000600), 0x1}]}) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)="81b641f1f3843704b6", 0x9}], 0x1}, 0x48005) r8 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r5, 0x6b, 0x1, &(0x7f00000001c0)=[{0x0, 0x2, {0x548ed88f3b813d72, 0x0, 0x1}, {0x0, 0x1, 0x2}, 0xfe, 0xfe}], 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2b, 0x0, {0x0, 0x0, 0x74, r9, {0xfff8, 0x4}, {0x0, 0xe}, {0xfff2, 0xffff}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x840) (async) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2b, 0x0, {0x0, 0x0, 0x74, r9, {0xfff8, 0x4}, {0x0, 0xe}, {0xfff2, 0xffff}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x840) 791.372587ms ago: executing program 4 (id=2804): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0xa0}, 0x1, 0x7}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000000000000000008847", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) connect$qrtr(r1, &(0x7f0000004d80)={0x2a, 0xffffffffffffffff, 0x3ffe}, 0xc) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newtaction={0x14, 0x1c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0xc850) r2 = socket(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r0) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x38, r3, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x62}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffff7}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000400}, 0x4000) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r4, &(0x7f0000000040)={&(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7f}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="280000000000000065dee63a390000000602020100000000fe8000000000000000000000000000aa1400000000000000290000004300000019f5f8"], 0x40}, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 713.282952ms ago: executing program 1 (id=2805): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000580)="aac6354efc0a7f516e24a40452449924", 0x10) getsockopt$inet6_tcp_buf(r1, 0x6, 0x21, 0x0, &(0x7f00000009c0)) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000001000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0bf00000000bf290d01435cfd8eb3080000f8ffffffbfa400000000000007040000f0ffffffb702000008dfffff17210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000c500000095"], &(0x7f0000000640)='syzkaller\x00', 0x8, 0xff6, &(0x7f0000000ac0)=""/4082, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 550.922291ms ago: executing program 4 (id=2806): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x9, 0x4, &(0x7f0000002a40)=ANY=[@ANYBLOB="85000000a0000800150000000000dd7f4500910f00000000000000000000f59a96ec96d013d54b31336ea4752c04c1650e"], &(0x7f0000000140)='GPL\x00', 0x4, 0x8c, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x32) (async) r0 = socket$xdp(0x2c, 0x3, 0x0) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r1, 0x1, 0x4c, &(0x7f0000000000)=0xb, 0x4) (async) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r1, &(0x7f00000027c0)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)=""/32, 0x20}], 0x1, &(0x7f0000000180)=""/227, 0xe3}, 0x8}, {{&(0x7f0000000280)=@nfc, 0x80, &(0x7f0000000380), 0x0, &(0x7f0000000480)=""/4096, 0x1000}, 0x200}, {{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000002480)=""/33, 0x21}, {&(0x7f0000002540)=""/219, 0xdb}, {&(0x7f0000002640)=""/195, 0xc3}], 0x4, &(0x7f0000002740)=""/93, 0x5d}, 0x1}], 0x4, 0x40002020, 0x0) (async) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) (async) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x80, 0x6) (async) syz_emit_ethernet(0x4e, &(0x7f0000002a80)=ANY=[], 0x0) (async) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000002a00)={&(0x7f0000002940)=""/171, 0x1328000, 0x800, 0x8, 0x1}, 0x20) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000) (async) recvfrom(r4, &(0x7f0000001140)=""/4096, 0x1000, 0x102, 0x0, 0x0) (async) sendto$inet(r4, &(0x7f0000000100)="1ce0", 0xffeb, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10) r5 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r5, &(0x7f0000000000)={0x18, 0x2, {0x1, @local}}, 0x1e) bind$pptp(r5, &(0x7f0000000080)={0x18, 0x2, {0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x1e) r6 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r7 = socket$l2tp6(0xa, 0x2, 0x73) connect$pppl2tp(r6, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r7, 0x4, 0x0, 0x0, 0x0, {0xa, 0x4e23, 0x2, @mcast1, 0x5a89}}}, 0x3a) unshare(0x400) (async) r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={0xffffffffffffffff}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000028c0)={r8, 0x0, 0x79, 0x0, &(0x7f0000000300)="6f9d2bb5c2b4ea423732041650377efbf9b7cdf594fa3f7cfbd870d2c61c6e8c5434cdd47a516c07562b037c23ba8d079bc73921b3f9e8ec3866b45968fa6074b916b0e71054e1ab5336e01bac08023e4fd618ecd6d86f01d31659439e28a9057896284db17a9ab1ede4ad63b634d7f1b4b76be8811a39831c", 0x0, 0x8, 0x0, 0x4c, 0x3f, &(0x7f0000000400)="c26efd1007963ae806e934e1e7409bbb2a2381f358c3e2cd716e36b93077f7a02641872158a49e0d6f8790eb4f41154a103f470d8cb7de99677de03126ba5c67123e53dec48e113fb0ebef92", &(0x7f00000024c0)="9775fa8eab65a148d41f61d86b49d2ee9fd5903387c586837e997ea28d69a4e0fb7546ad2bbf5c90d890085f549d3db193a2f018934a23c858a5efdcfdf6b0", 0x0, 0x0, 0x7}, 0x50) (async) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000000c0)={"6957608d766cfff5c3a665bd121a2d89", 0x0, 0x0, {0x4, 0x40000a}, {0x7, 0x8}, 0x5, [0x3, 0x3, 0x5, 0x6, 0x0, 0x400, 0xffffffffffff0001, 0x2, 0x8, 0x7, 0x80000000, 0x81, 0x10, 0x522586f, 0xfffffffffffffffb, 0x400000000000001]}) (async) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 535.355459ms ago: executing program 1 (id=2807): bpf$PROG_LOAD(0x5, &(0x7f0000001940)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="850000009a000000040000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newsa={0x158, 0x10, 0x1, 0x0, 0x0, {{@in6=@local, @in=@broadcast}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x32}, @in6=@loopback, {}, {0x0, 0x0, 0x0, 0x400000000000}, {}, 0x200000, 0x0, 0x2, 0x7, 0x0, 0xaf}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0xfffffffd}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0x0, 0x1c0}}]}, 0x158}}, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r1, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], 0x0, 0x6d, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000380), &(0x7f00000002c0), 0x8, 0x72, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2, 0x4, &(0x7f0000000000)=ANY=[@ANYRESHEX], &(0x7f0000003ff6)='GPL\x00', 0xffffff60, 0xc6, &(0x7f0000000400)=""/198, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x90000, @void, @value}, 0x94) 429.41852ms ago: executing program 3 (id=2808): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000003140)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000400)='z', 0x1}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000001c0), 0x8) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x4, 0xf2, 0x6, 0xd, 0x4, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x10, 0x1, 0x1}}) r2 = openat$cgroup_ro(r1, &(0x7f0000000180)='memory.numa_stat\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x120, r3, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x10001, 0x12}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xa06}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xc6, 0xbe, "18ffebf913abd9624c1981bedceb3784016ebcb0f1dd4726afcc03315dd26227e34e81a6eccc28217f20e89a6cd370c0d7cab2bffaee6041b0fed0ba883ad1f8e8f69a411d3e47afbfc163e67a89f0ac5fc1b8f69a670d18661125a4399ef3c4c7e5b3ecebf5b438aa2b05c1087224b7ce7dd900897d835405f9dd45b64889f31c01c265fa275cfef81c3fc5bb913240c653330466c6d8d2dc2b92aae77dd0a429bb775b32c2ae0ba311cfe2e636f3ac68be5a7b804dc85c291a3cdb9f0c462fe44e"}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x18, 0xbd, [0xa729, 0x6, 0x7f, 0x9, 0x3, 0x0, 0x8, 0x0, 0x8, 0x5]}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x90}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0xb}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0xcd}]}, 0x120}, 0x1, 0x0, 0x0, 0x4007010}, 0x4050) 428.52832ms ago: executing program 1 (id=2809): unshare(0x69a04c8e98d914be) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000080)={0x0, 0xd7, "f4f684099d3d5e9c3a690bafe40aa36f2f4f7949f78c1a42a4ebe06beeaa47a437a0472439cd92405d91175be5d559651d4572456da6795f2131cf99d7a1c9ae30014e1a8c8ff9a0627a1d5beb1fd5e787146a44ebc6b9116eb54a7a34f884b75ef4ef484d78f7e9da357f37640762b8cbc54a40bd830d55361cfd004b5e22d98d4113d8ab32fcae679d89de2ccf47cc14c3ff168c238b0d0f6630e201b3a3e2cac519acec3282ebcc7ad80a02839eb47847cc7bd70f23d42b292a1b754b61de1e7d724566e1bba25c032b97c35f90c301f9a521c4a8ef"}, &(0x7f0000000000)=0xdf) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000180)={r1, 0x16b56a61}, &(0x7f00000001c0)=0x8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x200, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x2c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x10, 0xf}, {}, {0xe, 0x5}}, [@TCA_CHAIN={0x8, 0xb, 0x40000000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x2008c014) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000001440)={'\x00', 0x2}) ioctl$TUNSETOFFLOAD(r6, 0x400454c9, 0x9) ioctl$TUNSETLINK(r6, 0x400454cd, 0x300) 415.307083ms ago: executing program 0 (id=2810): write(0xffffffffffffffff, &(0x7f0000000280)="7cf7195bde51192f5dac6a206cc7b6661435c335f21f64b98ab558f7a51b252aba69ffd684bebc534f8eed3facacdfe39ec9aa9efa94171e199a484e92af542a51f36f9b3f0bbd", 0x47) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e0000000000000004000000ffddf5a17d54faa96b59b64aa0164e6688e69f3016d89a34bc04a346421bca196a77baa76ce3"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000680)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r5, @ANYBLOB="08000000000000f6a542f4fbebd630"], 0x24}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f00000001c0)='console\x00', r6}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) 156.672134ms ago: executing program 3 (id=2811): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x6) connect$ax25(r0, &(0x7f00000000c0)={{0x3, @default, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'veth0_vlan\x00', &(0x7f0000000040)=@ethtool_ts_info={0x19}}) 29.377454ms ago: executing program 0 (id=2812): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) sendmsg$sock(r1, 0x0, 0x20000005) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, 0x0, 0x8081) unshare(0x62040200) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r3, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000240)={0x84, r4, 0x813, 0x0, 0x0, {}, [@TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD, @TIPC_NLA_MON_REF, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}]}, 0x84}}, 0x0) close(r2) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x9) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) syz_genetlink_get_family_id$mptcp(0x0, r0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r6, 0x29, 0x4e, 0x0, 0x0) r7 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$bt_BT_SECURITY(r7, 0x112, 0x4, &(0x7f0000000080)={0x0, 0xfb}, 0x2) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x20000000) 0s ago: executing program 1 (id=2813): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) write$tun(r1, &(0x7f0000000340)={@void, @val={0x2, 0x4, 0x5, 0xfff2, 0x4, 0x4}, @mpls={[], @generic="b19e05d0d9ddfc27"}}, 0x12) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000aa00000095"], &(0x7f0000000300)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) kernel console output (not intermixed with test programs): 00][ T9254] batadv1: entered allmulticast mode [ 175.166834][ T9254] batadv1: entered promiscuous mode [ 175.222885][ T9255] netlink: 376 bytes leftover after parsing attributes in process `syz.0.880'. [ 175.309487][ T9254] netlink: 'syz.4.877': attribute type 10 has an invalid length. [ 175.340456][ T9263] netlink: 'syz.2.882': attribute type 1 has an invalid length. [ 175.369351][ T9254] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 175.647790][ T1160] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 175.657666][ T1160] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 175.680266][ T30] audit: type=1804 audit(1743033758.123:3): pid=9278 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.887" name="/newroot/182/cgroup.controllers" dev="tmpfs" ino=958 res=1 errno=0 [ 175.696637][ T9278] netlink: 28 bytes leftover after parsing attributes in process `syz.2.887'. [ 175.730195][ T30] audit: type=1800 audit(1743033758.123:4): pid=9278 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.887" name="cgroup.controllers" dev="tmpfs" ino=958 res=0 errno=0 [ 175.757401][ T9281] lo speed is unknown, defaulting to 1000 [ 176.277339][ T9301] netlink: 'syz.1.893': attribute type 1 has an invalid length. [ 176.357251][ T9298] lo speed is unknown, defaulting to 1000 [ 176.381322][ T5152] Bluetooth: hci4: command 0x0405 tx timeout [ 176.492397][ T9310] tipc: Started in network mode [ 176.532995][ T9310] tipc: Node identity 1ea6cdf9acf4, cluster identity 4711 [ 176.585628][ T9310] tipc: Enabled bearer , priority 0 [ 176.613411][ T9315] syzkaller0: entered promiscuous mode [ 176.618956][ T9315] syzkaller0: entered allmulticast mode [ 176.832075][ T9328] netlink: 'syz.0.898': attribute type 1 has an invalid length. [ 176.889145][ T9325] netlink: 96 bytes leftover after parsing attributes in process `syz.1.897'. [ 177.237191][ T9337] lo speed is unknown, defaulting to 1000 [ 177.700548][ T9345] 8021q: adding VLAN 0 to HW filter on device bond1 [ 177.704485][ T1209] tipc: Node number set to 2991771129 [ 179.370783][ T9424] __nla_validate_parse: 2 callbacks suppressed [ 179.370803][ T9424] netlink: 104 bytes leftover after parsing attributes in process `syz.1.920'. [ 179.397947][ T9424] netlink: 4 bytes leftover after parsing attributes in process `syz.1.920'. [ 179.426327][ T9424] netlink: 8 bytes leftover after parsing attributes in process `syz.1.920'. [ 179.435672][ T9424] netlink: 4 bytes leftover after parsing attributes in process `syz.1.920'. [ 179.450244][ T9424] netlink: 'syz.1.920': attribute type 11 has an invalid length. [ 179.495812][ T9432] netlink: 4 bytes leftover after parsing attributes in process `syz.0.921'. [ 179.652067][ T9438] netlink: 28 bytes leftover after parsing attributes in process `syz.2.925'. [ 179.704017][ T9446] netlink: 40 bytes leftover after parsing attributes in process `syz.4.926'. [ 179.978405][ T9459] lo speed is unknown, defaulting to 1000 [ 180.008222][ T9461] netlink: 8 bytes leftover after parsing attributes in process `syz.4.930'. [ 181.119943][ T9482] netlink: 368 bytes leftover after parsing attributes in process `syz.1.934'. [ 181.175318][ T9482] netlink: 4 bytes leftover after parsing attributes in process `syz.1.934'. [ 181.615351][ T9495] tipc: Started in network mode [ 181.626237][ T9495] tipc: Node identity , cluster identity 4711 [ 182.348669][ T9519] tipc: Enabling of bearer rejected, failed to enable media [ 182.585419][ T9531] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 182.985939][ T9550] ipip0: entered promiscuous mode [ 183.029036][ T9550] ipip0: entered allmulticast mode [ 183.289457][ T9559] lo speed is unknown, defaulting to 1000 [ 183.903862][ T9583] lo speed is unknown, defaulting to 1000 [ 184.385884][ T9611] openvswitch: netlink: Tunnel attr 2 has unexpected len 0 expected 4 [ 185.234541][ T9636] xt_CT: No such helper "snmp" [ 185.254188][ T9636] __nla_validate_parse: 10 callbacks suppressed [ 185.254208][ T9636] netlink: 8 bytes leftover after parsing attributes in process `syz.3.972'. [ 185.299203][ T9636] netlink: 'syz.3.972': attribute type 10 has an invalid length. [ 185.998013][ T9672] netlink: 12 bytes leftover after parsing attributes in process `syz.4.979'. [ 186.241639][ T9679] tipc: Started in network mode [ 186.293940][ T9679] tipc: Node identity 6, cluster identity 4711 [ 186.314803][ T9679] tipc: Node number set to 6 [ 186.499520][ T9693] sctp: [Deprecated]: syz.0.986 (pid 9693) Use of struct sctp_assoc_value in delayed_ack socket option. [ 186.499520][ T9693] Use struct sctp_sack_info instead [ 186.742650][ T9699] netlink: 8 bytes leftover after parsing attributes in process `syz.0.986'. [ 187.148864][ T9708] netlink: 'syz.2.990': attribute type 3 has an invalid length. [ 187.173841][ T9708] netlink: 136 bytes leftover after parsing attributes in process `syz.2.990'. [ 187.201521][ T9708] netlink: 'syz.2.990': attribute type 3 has an invalid length. [ 187.542216][ T9722] netlink: 8 bytes leftover after parsing attributes in process `syz.3.994'. [ 187.617750][ T9722] netlink: 8 bytes leftover after parsing attributes in process `syz.3.994'. [ 187.633895][ T9722] netlink: 8 bytes leftover after parsing attributes in process `syz.3.994'. [ 187.646681][ T9727] netlink: 24 bytes leftover after parsing attributes in process `syz.2.995'. [ 187.661491][ T9727] netlink: 8 bytes leftover after parsing attributes in process `syz.2.995'. [ 187.662423][ T9722] netlink: 8 bytes leftover after parsing attributes in process `syz.3.994'. [ 187.700439][ T9720] bridge0: port 2(gretap0) entered blocking state [ 187.750500][ T9720] bridge0: port 2(gretap0) entered disabled state [ 187.771837][ T9720] gretap0: entered allmulticast mode [ 187.778609][ T9720] gretap0: entered promiscuous mode [ 187.792210][ T9720] bridge0: port 2(gretap0) entered blocking state [ 187.798780][ T9720] bridge0: port 2(gretap0) entered forwarding state [ 187.820292][ T9734] xt_l2tp: missing protocol rule (udp|l2tpip) [ 187.998893][ T9741] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 188.056291][ T9742] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 188.161960][ T9748] sctp: [Deprecated]: syz.4.1003 (pid 9748) Use of struct sctp_assoc_value in delayed_ack socket option. [ 188.161960][ T9748] Use struct sctp_sack_info instead [ 188.587470][ T9772] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.671421][ T9775] openvswitch: netlink: EtherType 0 is less than min 600 [ 188.753657][ T9772] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 188.807863][ T9778] IPVS: Error connecting to the multicast addr [ 188.915950][ T9782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.938054][ T9782] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.977454][ T9782] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 189.040519][ T9783] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 189.135337][ T9784] pim6reg1: entered promiscuous mode [ 189.145671][ T9784] pim6reg1: entered allmulticast mode [ 189.253819][ T9803] No such timeout policy "syz0" [ 190.395589][ T9856] lo speed is unknown, defaulting to 1000 [ 190.414212][ T9863] __nla_validate_parse: 73 callbacks suppressed [ 190.414229][ T9863] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1036'. [ 190.452666][ T9863] netlink: 'syz.0.1036': attribute type 2 has an invalid length. [ 190.460474][ T9863] netlink: 'syz.0.1036': attribute type 9 has an invalid length. [ 190.480409][ T9863] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1036'. [ 190.501227][ T9869] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1036'. [ 190.970036][ T9881] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 190.999881][ T9881] lo speed is unknown, defaulting to 1000 [ 191.043345][ T9883] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1041'. [ 191.052836][ T9883] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1041'. [ 191.062130][ T9883] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1041'. [ 191.071555][ T9883] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1041'. [ 191.082395][ T9883] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1041'. [ 191.102876][ T9883] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1041'. [ 191.124343][ T9883] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1041'. [ 192.021905][ T9910] CÃ: renamed from team_slave_0 [ 192.068692][ T9910] netlink: 'syz.3.1048': attribute type 3 has an invalid length. [ 192.104480][ T9910] A link change request failed with some changes committed already. Interface CÃ may have been left with an inconsistent configuration, please check. [ 192.173614][ T9915] netlink: 'syz.2.1050': attribute type 1 has an invalid length. [ 192.197139][ T9915] xt_CT: You must specify a L4 protocol and not use inversions on it [ 192.616124][ T9944] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 193.544320][ T9978] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.586294][ T9978] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 193.681669][ T9978] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 193.864157][ T9993] netlink: 'syz.1.1071': attribute type 10 has an invalid length. [ 193.885928][ T9993] lo: entered promiscuous mode [ 193.928398][ T9993] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 193.976051][ T9993] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.007643][ T9993] bond0: (slave lo): Enslaving as an active interface with an up link [ 194.164181][T10012] tap0: tun_chr_ioctl cmd 35111 [ 194.176280][ T9993] syz.1.1071 (9993) used greatest stack depth: 18224 bytes left [ 194.559352][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.566058][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.657198][T10031] pim6reg1: entered allmulticast mode [ 194.967510][T10053] tun0: tun_chr_ioctl cmd 1074025675 [ 194.977349][T10053] tun0: persist disabled [ 196.621753][ T5848] Bluetooth: hci3: command 0x0406 tx timeout [ 196.627977][ T5858] Bluetooth: hci2: command 0x0406 tx timeout [ 196.631203][ T55] Bluetooth: hci1: command 0x0406 tx timeout [ 196.825923][T10122] netlink: 'syz.0.1109': attribute type 1 has an invalid length. [ 196.848505][T10115] bond0: option mode: unable to set because the bond device has slaves [ 197.079853][T10129] __nla_validate_parse: 54 callbacks suppressed [ 197.079873][T10129] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1114'. [ 197.108175][T10134] netlink: 'syz.1.1114': attribute type 1 has an invalid length. [ 197.396385][T10150] netlink: 'syz.3.1119': attribute type 3 has an invalid length. [ 197.418989][T10150] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1119'. [ 197.777396][T10162] x_tables: duplicate underflow at hook 2 [ 197.913061][T10159] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1123'. [ 197.914157][T10167] netlink: 'syz.0.1121': attribute type 10 has an invalid length. [ 197.991365][T10167] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1121'. [ 198.185233][T10167] veth0_vlan: entered allmulticast mode [ 198.202210][T10167] bridge0: port 3(veth0_vlan) entered blocking state [ 198.253385][T10167] bridge0: port 3(veth0_vlan) entered disabled state [ 198.327663][T10167] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 198.567352][T10188] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1128'. [ 199.483605][T10216] lo speed is unknown, defaulting to 1000 [ 199.485128][T10218] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1138'. [ 199.670070][ T53] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 200.158686][T10235] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1142'. [ 200.258727][T10238] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1143'. [ 200.762652][T10261] tipc: Enabled bearer , priority 0 [ 201.069394][ T1209] IPVS: starting estimator thread 0... [ 201.174891][T10273] IPVS: using max 21 ests per chain, 50400 per kthread [ 201.520840][T10285] lo speed is unknown, defaulting to 1000 [ 201.739667][T10299] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1158'. [ 201.770613][T10299] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1158'. [ 202.388166][T10289] lo speed is unknown, defaulting to 1000 [ 202.884759][T10317] netlink: 'syz.4.1162': attribute type 11 has an invalid length. [ 202.907141][T10317] netlink: 216 bytes leftover after parsing attributes in process `syz.4.1162'. [ 202.944316][T10285] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1155'. [ 202.974476][T10317] IPv6: Can't replace route, no match found [ 203.001112][T10303] lo speed is unknown, defaulting to 1000 [ 203.105544][T10321] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1162'. [ 203.266155][T10316] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 203.919944][T10335] bridge0: port 2(gretap0) entered disabled state [ 204.018216][T10335] batman_adv: batadv0: Interface deactivated: dummy0 [ 204.148751][T10346] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1168'. [ 204.293746][T10335] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.309510][T10335] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.326818][T10335] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.335441][T10335] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.366596][T10335] tipc: Resetting bearer [ 204.376898][T10335] syzkaller0: left promiscuous mode [ 204.387354][T10335] syzkaller0: left allmulticast mode [ 204.400280][ T9] lo speed is unknown, defaulting to 1000 [ 204.408334][ T9] lo speed is unknown, defaulting to 1000 [ 204.414393][T10344] netlink: 300 bytes leftover after parsing attributes in process `syz.1.1167'. [ 204.593160][T10352] tipc: Started in network mode [ 204.602242][T10352] tipc: Node identity 080211, cluster identity 4711 [ 204.631180][T10352] tipc: Enabled bearer , priority 0 [ 204.643399][T10350] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 204.671615][T10350] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 204.689653][T10354] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1170'. [ 204.817598][T10359] sch_tbf: burst 0 is lower than device lo mtu (1514) ! [ 204.860547][T10361] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1174'. [ 204.954134][T10362] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1174'. [ 204.996279][T10365] lo speed is unknown, defaulting to 1000 [ 205.120504][T10371] openvswitch: netlink: Message has 24 unknown bytes. [ 205.325377][T10380] netlink: 'syz.3.1178': attribute type 1 has an invalid length. [ 205.342821][T10380] netlink: 'syz.3.1178': attribute type 4 has an invalid length. [ 205.361674][T10380] netlink: 15363 bytes leftover after parsing attributes in process `syz.3.1178'. [ 205.729058][T10389] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1182'. [ 205.751433][ T5922] tipc: Node number set to 134353152 [ 205.805392][T10385] (unnamed net_device) (uninitialized): option mode: invalid value (254) [ 205.909653][T10395] FAULT_INJECTION: forcing a failure. [ 205.909653][T10395] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 205.946625][T10395] CPU: 1 UID: 0 PID: 10395 Comm: syz.2.1184 Not tainted 6.14.0-rc7-syzkaller-01962-ga19f40d919ca #0 [ 205.946657][T10395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 205.946670][T10395] Call Trace: [ 205.946677][T10395] [ 205.946686][T10395] dump_stack_lvl+0x241/0x360 [ 205.946725][T10395] ? __pfx_dump_stack_lvl+0x10/0x10 [ 205.946747][T10395] ? __pfx__printk+0x10/0x10 [ 205.946768][T10395] ? __pfx_lock_release+0x10/0x10 [ 205.946813][T10395] should_fail_ex+0x40a/0x550 [ 205.946848][T10395] _copy_from_user+0x2d/0xb0 [ 205.946877][T10395] copy_msghdr_from_user+0xae/0x680 [ 205.946914][T10395] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 205.946943][T10395] ? __fget_files+0x2a/0x410 [ 205.946976][T10395] ? __fget_files+0x2a/0x410 [ 205.947013][T10395] __sys_sendmsg+0x209/0x350 [ 205.947043][T10395] ? __pfx___sys_sendmsg+0x10/0x10 [ 205.947081][T10395] ? do_sys_openat2+0x17a/0x1d0 [ 205.947137][T10395] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 205.947170][T10395] ? do_syscall_64+0x100/0x230 [ 205.947204][T10395] ? do_syscall_64+0xb6/0x230 [ 205.947237][T10395] do_syscall_64+0xf3/0x230 [ 205.947268][T10395] ? clear_bhb_loop+0x35/0x90 [ 205.947299][T10395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.947326][T10395] RIP: 0033:0x7f4e32b8d169 [ 205.947351][T10395] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 205.947366][T10395] RSP: 002b:00007f4e339da038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 205.947392][T10395] RAX: ffffffffffffffda RBX: 00007f4e32da5fa0 RCX: 00007f4e32b8d169 [ 205.947404][T10395] RDX: 00000000000048c0 RSI: 0000200000000000 RDI: 0000000000000004 [ 205.947414][T10395] RBP: 00007f4e339da090 R08: 0000000000000000 R09: 0000000000000000 [ 205.947424][T10395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 205.947433][T10395] R13: 0000000000000000 R14: 00007f4e32da5fa0 R15: 00007ffd546ceaf8 [ 205.947456][T10395] [ 206.302856][T10397] netlink: 'syz.1.1187': attribute type 4 has an invalid length. [ 206.785078][T10421] xt_TCPMSS: Only works on TCP SYN packets [ 206.978863][T10420] lo speed is unknown, defaulting to 1000 [ 207.287324][T10429] ieee802154 phy0 wpan0: encryption failed: -90 [ 207.400765][T10429] lo: left promiscuous mode [ 207.411796][T10429] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 207.922482][T10455] __nla_validate_parse: 5 callbacks suppressed [ 207.922503][T10455] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1197'. [ 208.042438][T10455] netlink: 'syz.4.1197': attribute type 1 has an invalid length. [ 208.069973][T10462] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1197'. [ 208.095401][T10463] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1202'. [ 208.156169][T10454] lo speed is unknown, defaulting to 1000 [ 209.422482][T10484] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1209'. [ 209.546342][T10484] tipc: Enabling of bearer rejected, already enabled [ 209.683646][T10497] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1213'. [ 209.972627][T10501] lo speed is unknown, defaulting to 1000 [ 210.000215][T10506] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1217'. [ 211.245623][T10525] xt_hashlimit: size too large, truncated to 1048576 [ 211.272773][T10527] IPVS: Unknown mcast interface: netpci0 [ 211.345427][T10533] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1221'. [ 211.665120][T10544] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1224'. [ 212.042965][T10551] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1228'. [ 212.078479][T10551] netlink: 'syz.3.1228': attribute type 2 has an invalid length. [ 212.113109][T10551] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1228'. [ 212.246856][T10563] netlink: 'syz.1.1232': attribute type 11 has an invalid length. [ 212.284272][T10565] FAULT_INJECTION: forcing a failure. [ 212.284272][T10565] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 212.303276][T10565] CPU: 1 UID: 0 PID: 10565 Comm: syz.0.1233 Not tainted 6.14.0-rc7-syzkaller-01962-ga19f40d919ca #0 [ 212.303304][T10565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 212.303316][T10565] Call Trace: [ 212.303323][T10565] [ 212.303332][T10565] dump_stack_lvl+0x241/0x360 [ 212.303362][T10565] ? __pfx_dump_stack_lvl+0x10/0x10 [ 212.303383][T10565] ? __pfx__printk+0x10/0x10 [ 212.303405][T10565] ? __pfx_lock_release+0x10/0x10 [ 212.303443][T10565] should_fail_ex+0x40a/0x550 [ 212.303478][T10565] _copy_from_iter+0x1df/0x1c40 [ 212.303503][T10565] ? __virt_addr_valid+0x183/0x530 [ 212.303524][T10565] ? __pfx_lock_release+0x10/0x10 [ 212.303561][T10565] ? __alloc_skb+0x28f/0x440 [ 212.303584][T10565] ? __pfx__copy_from_iter+0x10/0x10 [ 212.303610][T10565] ? __virt_addr_valid+0x183/0x530 [ 212.303629][T10565] ? __virt_addr_valid+0x183/0x530 [ 212.303647][T10565] ? __virt_addr_valid+0x45f/0x530 [ 212.303667][T10565] ? __phys_addr_symbol+0x2f/0x70 [ 212.303685][T10565] ? __check_object_size+0x47a/0x730 [ 212.303718][T10565] netlink_sendmsg+0x742/0xcb0 [ 212.303751][T10565] ? __pfx_netlink_sendmsg+0x10/0x10 [ 212.303775][T10565] ? aa_sock_msg_perm+0x91/0x160 [ 212.303813][T10565] ? __pfx_netlink_sendmsg+0x10/0x10 [ 212.303832][T10565] __sock_sendmsg+0x221/0x270 [ 212.303866][T10565] ____sys_sendmsg+0x53a/0x860 [ 212.303901][T10565] ? __pfx_____sys_sendmsg+0x10/0x10 [ 212.303924][T10565] ? __fget_files+0x2a/0x410 [ 212.303957][T10565] ? __fget_files+0x2a/0x410 [ 212.303994][T10565] __sys_sendmsg+0x269/0x350 [ 212.304025][T10565] ? __pfx___sys_sendmsg+0x10/0x10 [ 212.304063][T10565] ? do_sys_openat2+0x17a/0x1d0 [ 212.304124][T10565] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 212.304156][T10565] ? do_syscall_64+0x100/0x230 [ 212.304196][T10565] ? do_syscall_64+0xb6/0x230 [ 212.304229][T10565] do_syscall_64+0xf3/0x230 [ 212.304277][T10565] ? clear_bhb_loop+0x35/0x90 [ 212.304309][T10565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.304337][T10565] RIP: 0033:0x7f11af38d169 [ 212.304355][T10565] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.304373][T10565] RSP: 002b:00007f11b0223038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 212.304395][T10565] RAX: ffffffffffffffda RBX: 00007f11af5a5fa0 RCX: 00007f11af38d169 [ 212.304410][T10565] RDX: 00000000000048c0 RSI: 0000200000000000 RDI: 0000000000000004 [ 212.304422][T10565] RBP: 00007f11b0223090 R08: 0000000000000000 R09: 0000000000000000 [ 212.304434][T10565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 212.304446][T10565] R13: 0000000000000000 R14: 00007f11af5a5fa0 R15: 00007fff7509ea98 [ 212.304476][T10565] [ 212.304571][T10563] lo speed is unknown, defaulting to 1000 [ 212.777374][T10572] vlan2: entered promiscuous mode [ 212.809608][T10572] bridge0: entered promiscuous mode [ 212.844524][T10569] netlink: 'syz.3.1234': attribute type 10 has an invalid length. [ 212.995379][T10569] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 213.025372][T10578] __nla_validate_parse: 2 callbacks suppressed [ 213.025393][T10578] netlink: 1180 bytes leftover after parsing attributes in process `syz.0.1235'. [ 213.071301][T10578] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1235'. [ 213.102193][T10578] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1235'. [ 213.130091][T10578] netlink: 95 bytes leftover after parsing attributes in process `syz.0.1235'. [ 213.177937][T10578] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1235'. [ 213.188003][T10578] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1235'. [ 213.270311][T10578] netlink: 1192 bytes leftover after parsing attributes in process `syz.0.1235'. [ 213.381259][T10578] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1235'. [ 213.611450][T10606] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1241'. [ 213.655516][T10600] lo speed is unknown, defaulting to 1000 [ 213.660151][T10606] 0·: renamed from hsr_slave_1 [ 213.701486][T10606] 0·: entered allmulticast mode [ 213.719772][T10606] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 213.752127][T10613] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1244'. [ 214.170705][T10621] IPVS: Error connecting to the multicast addr [ 214.574421][T10634] openvswitch: netlink: Flow actions attr not present in new flow. [ 216.592919][T10710] lo speed is unknown, defaulting to 1000 [ 217.872032][T10765] lo speed is unknown, defaulting to 1000 [ 218.299513][T10767] lo speed is unknown, defaulting to 1000 [ 218.522522][T10771] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 218.892796][T10785] netlink: 'syz.1.1282': attribute type 26 has an invalid length. [ 218.958563][T10766] __nla_validate_parse: 8 callbacks suppressed [ 218.958584][T10766] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1278'. [ 219.006228][T10787] netlink: 'syz.3.1278': attribute type 1 has an invalid length. [ 219.019852][T10765] lo speed is unknown, defaulting to 1000 [ 219.050234][T10787] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1278'. [ 219.131430][T10787] NCSI netlink: No device for ifindex 0 [ 219.224581][T10799] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1284'. [ 219.713922][ T5850] Bluetooth: hci4: link tx timeout [ 219.719297][ T5850] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 219.730141][ T5850] Bluetooth: hci4: link tx timeout [ 219.736365][ T5850] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 219.950313][ T5850] Bluetooth: hci4: link tx timeout [ 219.956256][ T5850] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 220.013621][ T5850] Bluetooth: hci4: link tx timeout [ 220.018873][ T5850] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 220.176529][T10833] 8021q: adding VLAN 0 to HW filter on device bond2 [ 220.188719][T10833] bond0: (slave bond2): Enslaving as an active interface with an up link [ 220.307344][ T5850] Bluetooth: hci4: link tx timeout [ 220.312740][ T5850] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 220.782564][ T5850] Bluetooth: hci4: link tx timeout [ 220.787762][ T5850] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 221.049493][T10861] netem: unknown loss type 0 [ 221.071148][T10861] netem: change failed [ 221.201542][T10873] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1300'. [ 221.279041][T10873] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1300'. [ 221.343234][ T5850] Bluetooth: hci4: link tx timeout [ 221.349026][ T5850] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 221.423059][ T5850] Bluetooth: hci4: link tx timeout [ 221.428687][ T5850] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 221.691880][T10892] Cannot find del_set index 286 as target [ 221.741597][ T5850] Bluetooth: hci4: command 0x0405 tx timeout [ 222.123011][T10909] xt_socket: unknown flags 0x8 [ 222.138565][T10913] netlink: 'syz.0.1308': attribute type 11 has an invalid length. [ 222.198798][T10914] netlink: 'syz.0.1308': attribute type 11 has an invalid length. [ 222.358447][ T30] audit: type=1804 audit(1743033804.793:5): pid=10919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1312" name="/newroot/275/cgroup.controllers" dev="tmpfs" ino=1436 res=1 errno=0 [ 222.401766][T10919] netlink: 'syz.1.1312': attribute type 15 has an invalid length. [ 222.424322][ T30] audit: type=1800 audit(1743033804.793:6): pid=10919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1312" name="cgroup.controllers" dev="tmpfs" ino=1436 res=0 errno=0 [ 222.456535][T10923] lo speed is unknown, defaulting to 1000 [ 222.671473][T10940] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.680833][T10940] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.689673][T10940] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.698518][T10940] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.731609][T10946] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1316'. [ 223.175388][T10962] netlink: 'syz.1.1321': attribute type 10 has an invalid length. [ 223.395202][T10965] sctp: [Deprecated]: syz.4.1324 (pid 10965) Use of struct sctp_assoc_value in delayed_ack socket option. [ 223.395202][T10965] Use struct sctp_sack_info instead [ 223.452829][T10972] sctp: [Deprecated]: syz.4.1324 (pid 10972) Use of struct sctp_assoc_value in delayed_ack socket option. [ 223.452829][T10972] Use struct sctp_sack_info instead [ 223.749738][T10962] infiniband syz1: set down [ 223.755050][T10962] infiniband syz1: added team_slave_0 [ 223.787548][T10962] RDS/IB: syz1: added [ 223.791961][T10962] smc: adding ib device syz1 with port count 1 [ 223.798250][T10962] smc: ib device syz1 port 1 has pnetid [ 224.406404][T11006] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1328'. [ 224.543141][T10993] sit0: left promiscuous mode [ 224.649991][T11010] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1334'. [ 224.802528][T10993] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.810023][T10993] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.283275][T10993] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 225.504610][T10993] veth0_vlan: left allmulticast mode [ 225.771435][T10993] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 225.913873][T10993] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.926037][T10993] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.935584][T10993] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.944798][T10993] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.978389][T10993] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode [ 225.987343][T10993] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode [ 226.010834][T10993] bridge3: left promiscuous mode [ 226.027942][T11001] bridge_slave_1: entered promiscuous mode [ 226.219268][T11013] wireguard1: entered promiscuous mode [ 226.231780][T11016] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1336'. [ 226.236562][T11013] wireguard1: entered allmulticast mode [ 226.317916][T11022] netlink: 71 bytes leftover after parsing attributes in process `syz.2.1337'. [ 226.635104][T11030] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1340'. [ 226.745541][T11035] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 226.788116][T11035] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1342'. [ 226.937058][T11043] openvswitch: netlink: nsh attribute has 65512 unknown bytes. [ 226.954736][T11043] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 227.184532][T11052] netlink: 'syz.2.1349': attribute type 4 has an invalid length. [ 227.232506][T11053] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1348'. [ 227.273283][T11050] bpq0: entered promiscuous mode [ 227.278458][T11050] bpq0: entered allmulticast mode [ 227.747492][T11070] sock: sock_set_timeout: `syz.2.1354' (pid 11070) tries to set negative timeout [ 227.758181][T11070] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1354'. [ 227.768118][T11070] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1354'. [ 228.094137][T11078] @ÿ: renamed from veth0_vlan [ 231.669427][ T1160] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 255.982699][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.989135][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 263.661496][ T12] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 271.564080][T11122] batman_adv: batadv0: Adding interface: ip6gretap1 [ 271.586554][T11122] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.671285][T11122] batman_adv: batadv0: Interface activated: ip6gretap1 [ 271.763915][T11116] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1358'. [ 271.922051][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.934069][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.982864][T11138] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 272.031840][T11139] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 272.080646][T11141] netlink: 'syz.2.1362': attribute type 1 has an invalid length. [ 272.220629][T11141] 8021q: adding VLAN 0 to HW filter on device bond3 [ 272.304387][T11147] gretap1: entered promiscuous mode [ 272.332949][T11153] veth1_macvtap: left allmulticast mode [ 272.339021][T11153] veth1_macvtap: left promiscuous mode [ 272.452050][T11156] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1366'. [ 272.460216][T11158] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1366'. [ 272.500384][T11153] veth5: entered promiscuous mode [ 272.507108][T11154] veth1_macvtap: entered promiscuous mode [ 272.522853][T11154] veth1_macvtap: entered allmulticast mode [ 272.530212][T11154] macsec0: left promiscuous mode [ 272.537599][T11154] macsec0: entered promiscuous mode [ 272.680382][T11163] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1369'. [ 272.719228][T11163] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1369'. [ 272.735335][T11168] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 272.882895][T11175] lo speed is unknown, defaulting to 1000 [ 272.913652][T11180] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1371'. [ 272.925803][T11180] netlink: 'syz.0.1371': attribute type 10 has an invalid length. [ 272.941365][T11180] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1371'. [ 272.962594][T11180] veth0_vlan: left promiscuous mode [ 272.979211][T11180] veth0_vlan: entered promiscuous mode [ 273.009866][T11180] veth0_vlan: entered allmulticast mode [ 273.021819][T11180] bridge0: port 3(veth0_vlan) entered blocking state [ 273.028783][T11180] bridge0: port 3(veth0_vlan) entered disabled state [ 273.039554][T11180] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 273.345145][T11189] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1376'. [ 273.361554][T11189] bond0: option resend_igmp: invalid value (5160963) [ 273.371208][T11189] bond0: option resend_igmp: allowed values 0 - 255 [ 273.502393][T11198] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1378'. [ 273.590489][T11203] tap0: tun_chr_ioctl cmd 1074025680 [ 273.875310][T11219] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 274.030761][T11227] lo speed is unknown, defaulting to 1000 [ 274.189390][T11240] netlink: 'syz.3.1390': attribute type 2 has an invalid length. [ 274.201857][T11240] netlink: 'syz.3.1390': attribute type 1 has an invalid length. [ 274.501355][T11250] netlink: 'syz.1.1393': attribute type 5 has an invalid length. [ 274.514042][T11252] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1394'. [ 274.540457][T11252] vlan2: entered allmulticast mode [ 274.550504][T11252] batadv0: entered allmulticast mode [ 274.599391][T11250] : entered promiscuous mode [ 274.872858][T11267] netlink: 'syz.1.1398': attribute type 1 has an invalid length. [ 274.939716][T11267] 8021q: adding VLAN 0 to HW filter on device bond3 [ 274.988547][T11273] bond3: (slave gretap1): making interface the new active one [ 275.056471][T11273] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 275.180855][T11273] syz.1.1398 (11273) used greatest stack depth: 18128 bytes left [ 275.243163][T11287] ax25_connect(): syz.3.1402 uses autobind, please contact jreuter@yaina.de [ 275.545439][T11294] netlink: 'syz.0.1404': attribute type 21 has an invalid length. [ 275.546053][T11296] netlink: 'syz.4.1405': attribute type 1 has an invalid length. [ 275.892148][T11313] xt_CT: You must specify a L4 protocol and not use inversions on it [ 276.160726][T11327] netlink: 'syz.3.1412': attribute type 1 has an invalid length. [ 276.190008][T11324] lo speed is unknown, defaulting to 1000 [ 276.696010][T11347] netlink: 'syz.1.1418': attribute type 4 has an invalid length. [ 276.876030][T11357] lo speed is unknown, defaulting to 1000 [ 277.354110][T11372] __nla_validate_parse: 5 callbacks suppressed [ 277.354128][T11372] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1423'. [ 277.566676][T11375] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1424'. [ 277.698354][ T1160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.734273][ T1160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.770376][T11384] netlink: 'syz.3.1426': attribute type 5 has an invalid length. [ 278.715160][T11438] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1441'. [ 278.870839][T11444] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1444'. [ 278.993763][T11447] tipc: Enabled bearer , priority 10 [ 279.134979][T11460] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1450'. [ 279.232689][T11468] netlink: 'syz.1.1452': attribute type 21 has an invalid length. [ 279.366965][T11475] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1455'. [ 279.433760][T11475] bridge_slave_1 (unregistering): left allmulticast mode [ 279.448179][T11475] bridge_slave_1 (unregistering): left promiscuous mode [ 279.462803][T11475] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.473726][T11480] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1456'. [ 279.484358][T11480] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1456'. [ 279.716586][T11485] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1457'. [ 279.766629][T11485] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1457'. [ 280.075535][T11499] pimreg3: entered allmulticast mode [ 280.084088][T11501] netlink: 'syz.1.1464': attribute type 2 has an invalid length. [ 280.094478][T11501] netlink: 'syz.1.1464': attribute type 2 has an invalid length. [ 280.128021][T11497] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 280.327700][T11512] lo: entered allmulticast mode [ 280.350765][T11512] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 280.862709][T11532] IPVS: set_ctl: invalid protocol: 98 224.0.0.1:20003 [ 280.972615][T11523] ip6tnl1: left promiscuous mode [ 280.984675][T11523] vlan2: left promiscuous mode [ 280.989601][T11523] bridge0: left promiscuous mode [ 281.003141][T11523] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 281.450872][T11549] tipc: Failed to remove unknown binding: 66,1,1/134353152:2365069052/2365069054 [ 281.591698][T11554] pim6reg1: entered promiscuous mode [ 281.597273][T11554] pim6reg1: entered allmulticast mode [ 281.915432][T11566] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 282.266735][T11590] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 282.584857][T11612] __nla_validate_parse: 5 callbacks suppressed [ 282.584877][T11612] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1500'. [ 282.717005][T11616] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 283.019995][ T5846] Bluetooth: hci4: link tx timeout [ 283.025502][ T5846] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 283.054573][T11625] lo speed is unknown, defaulting to 1000 [ 283.283660][T11636] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1509'. [ 283.296675][T11636] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1509'. [ 283.315690][T11636] bond0: entered promiscuous mode [ 283.325660][T11636] lo: entered promiscuous mode [ 283.511494][T11643] netlink: 'syz.1.1511': attribute type 1 has an invalid length. [ 283.547544][T11643] netlink: 'syz.1.1511': attribute type 2 has an invalid length. [ 283.573772][T11643] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1511'. [ 283.870423][T11655] netlink: 196 bytes leftover after parsing attributes in process `syz.1.1518'. [ 283.870854][T11657] FAULT_INJECTION: forcing a failure. [ 283.870854][T11657] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 283.902823][T11657] CPU: 1 UID: 0 PID: 11657 Comm: syz.0.1517 Not tainted 6.14.0-rc7-syzkaller-01962-ga19f40d919ca #0 [ 283.902849][T11657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 283.902861][T11657] Call Trace: [ 283.902867][T11657] [ 283.902874][T11657] dump_stack_lvl+0x241/0x360 [ 283.902902][T11657] ? __pfx_dump_stack_lvl+0x10/0x10 [ 283.902923][T11657] ? __pfx__printk+0x10/0x10 [ 283.902943][T11657] ? __pfx_lock_release+0x10/0x10 [ 283.902978][T11657] should_fail_ex+0x40a/0x550 [ 283.903010][T11657] _copy_from_user+0x2d/0xb0 [ 283.903037][T11657] sctp_setsockopt+0xcc/0x11c0 [ 283.903058][T11657] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 283.903077][T11657] do_sock_setsockopt+0x3af/0x720 [ 283.903104][T11657] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 283.903130][T11657] ? __fget_files+0x395/0x410 [ 283.903156][T11657] ? __fget_files+0x2a/0x410 [ 283.903189][T11657] __x64_sys_setsockopt+0x1ee/0x280 [ 283.903218][T11657] do_syscall_64+0xf3/0x230 [ 283.903246][T11657] ? clear_bhb_loop+0x35/0x90 [ 283.903275][T11657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.903299][T11657] RIP: 0033:0x7f11af38d169 [ 283.903314][T11657] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 283.903329][T11657] RSP: 002b:00007f11b0223038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 283.903348][T11657] RAX: ffffffffffffffda RBX: 00007f11af5a5fa0 RCX: 00007f11af38d169 [ 283.903361][T11657] RDX: 0000000000000064 RSI: 0000000000000084 RDI: 0000000000000003 [ 283.903372][T11657] RBP: 00007f11b0223090 R08: 000000000000002c R09: 0000000000000000 [ 283.903383][T11657] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 283.903393][T11657] R13: 0000000000000000 R14: 00007f11af5a5fa0 R15: 00007fff7509ea98 [ 283.903419][T11657] [ 284.383610][T11663] lo speed is unknown, defaulting to 1000 [ 285.048569][T11698] netlink: 'syz.2.1526': attribute type 1 has an invalid length. [ 285.063950][T11698] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1526'. [ 285.110880][ T5846] Bluetooth: hci4: command 0x0405 tx timeout [ 285.318754][T11704] vlan2: entered promiscuous mode [ 285.338254][T11704] veth0: entered promiscuous mode [ 285.446437][T11714] FAULT_INJECTION: forcing a failure. [ 285.446437][T11714] name failslab, interval 1, probability 0, space 0, times 0 [ 285.521142][T11714] CPU: 1 UID: 0 PID: 11714 Comm: syz.2.1530 Not tainted 6.14.0-rc7-syzkaller-01962-ga19f40d919ca #0 [ 285.521170][T11714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 285.521181][T11714] Call Trace: [ 285.521187][T11714] [ 285.521195][T11714] dump_stack_lvl+0x241/0x360 [ 285.521222][T11714] ? __pfx_dump_stack_lvl+0x10/0x10 [ 285.521242][T11714] ? __pfx__printk+0x10/0x10 [ 285.521261][T11714] ? sctp_get_port_local+0x206/0x1740 [ 285.521291][T11714] should_fail_ex+0x40a/0x550 [ 285.521323][T11714] should_failslab+0xac/0x100 [ 285.521368][T11714] __kmalloc_cache_noprof+0x70/0x390 [ 285.521394][T11714] ? sctp_add_bind_addr+0x89/0x3a0 [ 285.521420][T11714] ? __pfx_sctp_get_port_local+0x10/0x10 [ 285.521444][T11714] sctp_add_bind_addr+0x89/0x3a0 [ 285.521476][T11714] sctp_do_bind+0x5d2/0x950 [ 285.521507][T11714] sctp_setsockopt_bindx+0x29d/0x440 [ 285.521534][T11714] sctp_setsockopt+0x7f8/0x11c0 [ 285.521556][T11714] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 285.521576][T11714] do_sock_setsockopt+0x3af/0x720 [ 285.521605][T11714] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 285.521641][T11714] ? __fget_files+0x395/0x410 [ 285.521667][T11714] ? __fget_files+0x2a/0x410 [ 285.521704][T11714] __x64_sys_setsockopt+0x1ee/0x280 [ 285.521734][T11714] do_syscall_64+0xf3/0x230 [ 285.521764][T11714] ? clear_bhb_loop+0x35/0x90 [ 285.521796][T11714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.521822][T11714] RIP: 0033:0x7f4e32b8d169 [ 285.521839][T11714] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 285.521854][T11714] RSP: 002b:00007f4e339da038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 285.521874][T11714] RAX: ffffffffffffffda RBX: 00007f4e32da5fa0 RCX: 00007f4e32b8d169 [ 285.521888][T11714] RDX: 0000000000000064 RSI: 0000000000000084 RDI: 0000000000000003 [ 285.521899][T11714] RBP: 00007f4e339da090 R08: 000000000000002c R09: 0000000000000000 [ 285.521911][T11714] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 285.521922][T11714] R13: 0000000000000000 R14: 00007f4e32da5fa0 R15: 00007ffd546ceaf8 [ 285.521951][T11714] [ 285.567986][T11718] lo speed is unknown, defaulting to 1000 [ 286.985801][T11767] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1538'. [ 286.988332][T11764] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 287.035467][T11764] syzkaller1: Refused to change device type [ 287.187310][ T12] wlan0: Trigger new scan to find an IBSS to join [ 287.342113][ T5846] Bluetooth: hci4: command 0x0405 tx timeout [ 287.805002][T11795] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1542'. [ 288.123549][T11805] netlink: 'syz.1.1543': attribute type 10 has an invalid length. [ 288.444114][T11819] netlink: 'syz.4.1545': attribute type 16 has an invalid length. [ 288.452469][T11819] netlink: 'syz.4.1545': attribute type 17 has an invalid length. [ 288.518609][T11819] bridge0: port 2(gretap0) entered blocking state [ 288.525248][T11819] bridge0: port 2(gretap0) entered forwarding state [ 288.543779][T11819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 288.552292][T11819] 8021q: adding VLAN 0 to HW filter on device team0 [ 288.562260][T11819] batman_adv: batadv0: Interface activated: dummy0 [ 288.582141][T11819] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 288.613316][ T10] lo speed is unknown, defaulting to 1000 [ 288.714356][ T10] lo speed is unknown, defaulting to 1000 [ 289.172424][T11850] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 289.213342][T11848] lo speed is unknown, defaulting to 1000 [ 289.330359][T11858] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1555'. [ 289.458174][T11865] ipip0: entered promiscuous mode [ 289.623344][T11875] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1557'. [ 289.686899][T11875] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1557'. [ 289.978855][T11892] netlink: 'syz.1.1560': attribute type 3 has an invalid length. [ 290.142419][ T53] wlan0: Trigger new scan to find an IBSS to join [ 290.142741][T11881] syzkaller0: entered promiscuous mode [ 290.221080][T11881] syzkaller0: entered allmulticast mode [ 290.433006][T11912] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1564'. [ 292.791593][T11933] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 292.896011][T11939] netlink: 'syz.2.1567': attribute type 3 has an invalid length. [ 293.181801][ T53] wlan0: Trigger new scan to find an IBSS to join [ 293.236576][T11952] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1569'. [ 293.252425][T11952] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1569'. [ 293.294993][T11957] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1569'. [ 293.333234][T11952] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 293.372908][T11952] gretap2: entered promiscuous mode [ 293.645396][T11965] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1571'. [ 293.791698][T11969] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 293.849565][T11969] openvswitch: netlink: nsh attribute has 65535 unknown bytes. [ 293.883569][T11969] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 294.133213][T11985] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1575'. [ 294.144222][T11978] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1574'. [ 294.154156][ T1150] wlan0: Creating new IBSS network, BSSID 2a:b1:94:9c:7a:bc [ 294.594542][T12007] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1582'. [ 294.698721][T12014] ipvlan2: entered promiscuous mode [ 294.711779][T12014] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 294.906603][T12030] netlink: 'syz.3.1587': attribute type 1 has an invalid length. [ 294.915327][T12030] netlink: 'syz.3.1587': attribute type 1 has an invalid length. [ 295.242135][T12046] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1591'. [ 295.315202][T12052] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 295.383226][T12056] netlink: 'syz.1.1595': attribute type 3 has an invalid length. [ 295.405856][T12056] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1595'. [ 295.577626][T12058] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1596'. [ 295.603641][T12058] batadv0: entered promiscuous mode [ 295.628818][T12058] batadv0: left promiscuous mode [ 295.647592][T12069] netlink: 'syz.1.1600': attribute type 1 has an invalid length. [ 295.671380][ T53] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 295.760401][T12067] tun0: tun_chr_ioctl cmd 1074025681 [ 295.819581][T12072] openvswitch: netlink: Tunnel attr 2 has unexpected len 0 expected 4 [ 295.999095][T12088] netlink: 'syz.4.1605': attribute type 3 has an invalid length. [ 296.337662][T12104] ipvlan2: entered allmulticast mode [ 296.361133][T12104] macsec0: entered allmulticast mode [ 296.663462][T12127] netlink: 'syz.3.1614': attribute type 27 has an invalid length. [ 296.672460][T12125] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 296.678447][T12125] syzkaller1: Refused to change device type [ 296.805217][T12130] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 296.859350][T12132] netlink: 'syz.2.1618': attribute type 1 has an invalid length. [ 297.152255][T12143] netlink: 'syz.1.1622': attribute type 15 has an invalid length. [ 297.239860][T12147] netlink: 'syz.2.1623': attribute type 4 has an invalid length. [ 297.288879][T12147] netlink: 'syz.2.1623': attribute type 2 has an invalid length. [ 298.227363][T12187] lo speed is unknown, defaulting to 1000 [ 298.483048][T12197] wireguard0: entered promiscuous mode [ 298.531430][T12197] wireguard0: entered allmulticast mode [ 298.601943][T12200] IPVS: set_ctl: invalid protocol: 108 100.1.1.0:20002 [ 298.959150][T12212] netlink: 'syz.3.1642': attribute type 5 has an invalid length. [ 298.981358][T12212] __nla_validate_parse: 10 callbacks suppressed [ 298.981378][T12212] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1642'. [ 299.073243][T12203] smc: removing ib device syz0 [ 299.422049][T12221] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1647'. [ 299.760051][T12231] netlink: 'syz.1.1649': attribute type 4 has an invalid length. [ 300.083893][T12236] x_tables: duplicate underflow at hook 1 [ 300.202261][T12227] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1646'. [ 300.283160][T12227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 300.298783][T12227] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 300.527930][T12250] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1653'. [ 300.675830][T12252] syzkaller1: entered promiscuous mode [ 300.689287][T12252] syzkaller1: entered allmulticast mode [ 301.010285][T12257] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 301.101653][T12258] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1656'. [ 301.243296][T12266] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1656'. [ 301.447128][T12273] ip6tnl1: entered promiscuous mode [ 301.470734][T12273] ip6tnl1: entered allmulticast mode [ 301.857701][T12288] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1664'. [ 302.178457][T12297] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1667'. [ 302.503456][T12304] validate_nla: 1 callbacks suppressed [ 302.503476][T12304] netlink: 'syz.0.1670': attribute type 10 has an invalid length. [ 302.528975][T12305] ieee802154 phy1 wpan1: encryption failed: -22 [ 302.547698][T12304] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1670'. [ 302.779046][T12309] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 302.891564][T12325] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1676'. [ 303.289724][T12336] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 303.784120][T12365] tipc: Enabling of bearer rejected, failed to enable media [ 303.857672][T12369] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 304.002094][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.010056][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.142271][T12380] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 304.191358][T12380] syzkaller1: entered promiscuous mode [ 304.196885][T12380] syzkaller1: entered allmulticast mode [ 304.221389][T12388] bond0: entered promiscuous mode [ 304.226556][T12388] team0: entered promiscuous mode [ 304.236976][T12388] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 304.261577][T12388] bond2: entered promiscuous mode [ 304.291758][T12388] batadv0: entered promiscuous mode [ 304.297962][T12388] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 304.324099][T12388] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 304.334087][T12388] bond0: left promiscuous mode [ 304.338976][T12388] team0: left promiscuous mode [ 304.354294][T12388] mac80211_hwsim hwsim11 wlan1: left promiscuous mode [ 304.368958][T12388] bond2: left promiscuous mode [ 304.378814][T12388] batadv0: left promiscuous mode [ 304.602314][T12405] xt_policy: output policy not valid in PREROUTING and INPUT [ 304.741360][T12414] __nla_validate_parse: 2 callbacks suppressed [ 304.741396][T12414] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1705'. [ 304.953884][T12433] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1713'. [ 304.977010][T12433] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1713'. [ 305.002682][T12436] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1712'. [ 305.073333][T12440] sch_tbf: burst 511 is lower than device veth7 mtu (1514) ! [ 305.108087][T12439] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1714'. [ 305.286991][T12444] netlink: 'syz.3.1717': attribute type 10 has an invalid length. [ 305.452842][T12458] xt_hashlimit: size too large, truncated to 1048576 [ 305.504392][T12463] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1720'. [ 306.018687][T12481] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1726'. [ 306.034271][T12484] netlink: zone id is out of range [ 306.039423][T12484] netlink: zone id is out of range [ 306.059308][T12485] netlink: zone id is out of range [ 306.087545][T12485] netlink: zone id is out of range [ 306.091609][T12484] netlink: zone id is out of range [ 306.097704][T12485] netlink: zone id is out of range [ 306.097793][T12484] netlink: zone id is out of range [ 306.116734][T12485] netlink: zone id is out of range [ 306.161340][T12484] netlink: zone id is out of range [ 306.167539][T12485] netlink: zone id is out of range [ 306.329057][T12491] veth0_to_batadv: left promiscuous mode [ 307.231209][T12533] tipc: Enabling of bearer rejected, failed to enable media [ 307.592221][T12541] bond0: (slave batadv0): Releasing backup interface [ 307.610658][T12541] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.624093][T12541] bridge_slave_1: left allmulticast mode [ 307.630018][T12541] bridge_slave_1: left promiscuous mode [ 307.630051][T12544] netlink: 'syz.0.1747': attribute type 10 has an invalid length. [ 307.635977][T12541] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.706609][T12541] bond0: (slave bond_slave_0): Releasing backup interface [ 307.726886][T12541] bond0: (slave bond_slave_1): Releasing backup interface [ 307.767695][T12541] team0: Port device team_slave_0 removed [ 307.792067][T12541] team0: Port device team_slave_1 removed [ 307.799491][T12541] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 307.807123][T12547] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1746'. [ 307.905050][T12544] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 308.372714][T12572] netlink: 'syz.0.1753': attribute type 5 has an invalid length. [ 309.206026][T12603] netlink: 'syz.2.1762': attribute type 1 has an invalid length. [ 309.403914][T12603] 8021q: adding VLAN 0 to HW filter on device bond4 [ 309.497566][T12608] bond4: (slave gretap1): making interface the new active one [ 309.521631][T12608] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 309.560545][T12608] syz.2.1762 (12608) used greatest stack depth: 17712 bytes left [ 309.603608][T12618] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1767'. [ 309.654534][T12624] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1767'. [ 309.743553][T12618] tipc: Enabling of bearer rejected, failed to enable media [ 309.764004][T12628] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1770'. [ 309.781978][T12628] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1770'. [ 310.013705][T12641] netlink: 'syz.1.1773': attribute type 2 has an invalid length. [ 310.124574][T12650] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1775'. [ 310.322278][T12654] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1777'. [ 310.348870][T12653] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1777'. [ 311.114510][T12689] delete_channel: no stack [ 311.247611][T12700] netlink: 'syz.1.1790': attribute type 10 has an invalid length. [ 311.271477][T12700] batman_adv: batadv0: Adding interface: team0 [ 311.277685][T12700] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.327652][T12700] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 311.338145][T12701] netlink: 'syz.1.1790': attribute type 10 has an invalid length. [ 311.358377][T12701] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1790'. [ 311.406911][T12701] team0: entered promiscuous mode [ 311.433739][T12701] 8021q: adding VLAN 0 to HW filter on device team0 [ 311.452542][T12701] batman_adv: batadv0: Interface activated: team0 [ 311.459050][T12701] batman_adv: batadv0: Interface deactivated: team0 [ 311.505306][T12701] batman_adv: batadv0: Removing interface: team0 [ 311.522474][T12701] bridge0: port 2(team0) entered blocking state [ 311.530094][T12701] bridge0: port 2(team0) entered disabled state [ 311.571291][T12701] team0: entered allmulticast mode [ 311.586916][T12726] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1797'. [ 311.617326][T12701] vlan2: entered promiscuous mode [ 311.626436][T12715] netlink: 'syz.0.1795': attribute type 12 has an invalid length. [ 311.641206][T12717] netlink: 'syz.0.1795': attribute type 12 has an invalid length. [ 311.706497][T12701] netlink: 150676 bytes leftover after parsing attributes in process `syz.1.1790'. [ 312.043170][T12741] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1802'. [ 312.071242][T12741] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1802'. [ 312.157162][T12746] net_ratelimit: 1396 callbacks suppressed [ 312.157180][T12746] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 312.293069][T12758] netlink: 'syz.2.1801': attribute type 11 has an invalid length. [ 312.635487][T12769] xt_l2tp: missing protocol rule (udp|l2tpip) [ 313.572483][T12789] nlmon0: Master is either lo or non-ether device [ 314.291912][ T12] tipc: Resetting bearer [ 314.792397][T12808] set match dimension is over the limit! [ 314.824399][T12808] __nla_validate_parse: 4 callbacks suppressed [ 314.824416][T12808] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1819'. [ 314.838746][T12806] syzkaller0: entered promiscuous mode [ 314.875006][T12806] syzkaller0: entered allmulticast mode [ 314.971662][T12808] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1819'. [ 315.711184][T12829] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1823'. [ 316.156776][T12839] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1825'. [ 317.438582][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.733608][T12851] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1829'. [ 319.316609][T12859] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1832'. [ 319.326251][T12860] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1832'. [ 319.369244][T12862] netlink: ct family unspecified [ 319.415852][T12862] openvswitch: netlink: Actions may not be safe on all matching packets [ 319.549351][T12875] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1836'. [ 319.660877][T12881] bpq0: left promiscuous mode [ 319.661444][T12880] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1838'. [ 319.665793][T12881] bpq0: left allmulticast mode [ 319.793837][T12889] tipc: Enabled bearer , priority 22 [ 319.819737][T12889] xt_hashlimit: size too large, truncated to 1048576 [ 319.978627][T12897] netlink: 'syz.2.1842': attribute type 21 has an invalid length. [ 320.102282][T12897] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1842'. [ 320.121302][T12890] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1839'. [ 320.144018][T12890] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1839'. [ 366.990440][T12914] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1845'. [ 367.006354][T12914] batadv1: entered promiscuous mode [ 367.031790][T12914] batadv1: entered allmulticast mode [ 367.063729][T12923] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1845'. [ 367.120749][T12923] batadv1: entered promiscuous mode [ 367.132297][T12923] batadv1: entered allmulticast mode [ 367.166917][T12924] macvlan0: entered promiscuous mode [ 367.180260][T12924] bridge0: entered promiscuous mode [ 367.187477][T12924] bridge0: port 1(macvlan0) entered blocking state [ 367.194733][T12924] bridge0: port 1(macvlan0) entered disabled state [ 367.209216][T12924] macvlan0: entered allmulticast mode [ 367.216609][T12924] bridge0: entered allmulticast mode [ 367.225791][T12924] macvlan0: left allmulticast mode [ 367.235236][T12924] bridge0: left allmulticast mode [ 367.246153][T12924] bridge0: left promiscuous mode [ 367.761426][T12949] IPVS: set_ctl: invalid protocol: 108 0.0.0.0:20004 [ 367.792360][T12955] netlink: 1284 bytes leftover after parsing attributes in process `syz.2.1855'. [ 367.841153][T12955] openvswitch: netlink: Flow actions attr not present in new flow. [ 367.910255][T12963] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1858'. [ 367.995484][T12975] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 368.805513][T13007] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1869'. [ 368.883109][T13009] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1870'. [ 369.087095][T13016] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1872'. [ 369.125391][T13020] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1873'. [ 369.887465][T13049] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1882'. [ 369.931701][T13049] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1882'. [ 370.020648][T13061] netlink: 'syz.2.1885': attribute type 10 has an invalid length. [ 370.080624][T13064] netlink: 'syz.1.1886': attribute type 15 has an invalid length. [ 370.103372][T13061] batman_adv: batadv0: Adding interface: virt_wifi0 [ 370.110123][T13061] batman_adv: batadv0: Interface activated: virt_wifi0 [ 370.359953][ T1160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.368423][ T1160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.583216][T13100] openvswitch: netlink: Duplicate or invalid key (type 0). [ 370.608104][T13100] openvswitch: netlink: Actions may not be safe on all matching packets [ 370.682940][T13104] netlink: 'syz.3.1896': attribute type 1 has an invalid length. [ 370.995208][T13117] netlink: 'syz.3.1900': attribute type 1 has an invalid length. [ 372.537662][T13174] TCP: TCP_TX_DELAY enabled [ 374.490420][T13170] __nla_validate_parse: 7 callbacks suppressed [ 374.490440][T13170] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1912'. [ 375.064322][T13205] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1922'. [ 375.081087][T13205] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1922'. [ 375.121875][T13214] netlink: 16215 bytes leftover after parsing attributes in process `syz.3.1925'. [ 375.307569][T13222] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1928'. [ 375.418557][T13236] bond0: (slave lo): Releasing backup interface [ 375.438161][T13236] bond0: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 375.471769][T13236] lo: left promiscuous mode [ 375.523016][T13236] bond0: left promiscuous mode [ 375.552214][T13240] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1931'. [ 375.573441][T13236] team0: left allmulticast mode [ 375.578542][T13236] team0: left promiscuous mode [ 375.584521][T13236] bridge0: port 2(team0) entered disabled state [ 375.646431][T13236] vlan2: left promiscuous mode [ 375.703861][T13236] bridge_slave_0: left promiscuous mode [ 375.734217][T13236] veth0_to_batadv: left promiscuous mode [ 375.740102][T13236] veth0_to_batadv: left allmulticast mode [ 375.838617][T13236] veth0_vlan: left allmulticast mode [ 375.846984][T13245] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1934'. [ 375.902089][T13236] veth1_macvtap: left allmulticast mode [ 375.917419][T13236] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.928018][T13236] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.939033][T13236] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.948649][T13236] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.980326][T13236] vlan2: left allmulticast mode [ 375.986252][T13236] macsec0: left allmulticast mode [ 375.992073][T13236] bridge0: port 1(vlan2) entered disabled state [ 376.028314][T13236] bond1: left promiscuous mode [ 376.033414][T13236] bridge2: left promiscuous mode [ 376.044605][T13236] bond1: (slave bridge2): Releasing backup interface [ 376.059287][T13236] bond2: (slave veth3): Releasing active interface [ 376.067391][T13236] tipc: Resetting bearer [ 376.077833][T13236] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 376.087327][T13236] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 376.096826][T13236] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 376.106421][T13236] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 376.127199][T13236] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.136934][T13236] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.145976][T13236] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.155463][T13236] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.170873][T13236] veth5: left promiscuous mode [ 376.185382][T13236] bond3: (slave gretap1): Releasing active interface [ 376.194220][T13236] gretap2: left promiscuous mode [ 376.207253][T13247] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1933'. [ 376.508088][T13263] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 376.532181][T13263] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 376.553049][T13263] tipc: Resetting bearer [ 376.824176][T13279] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap2 [ 376.836658][T13279] batman_adv: batadv0: Adding interface: ip6gretap2 [ 376.847963][T13279] batman_adv: batadv0: Interface activated: ip6gretap2 [ 377.000339][T13289] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1946'. [ 377.011374][T13285] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1944'. [ 377.239275][T13301] netlink: 'syz.1.1949': attribute type 2 has an invalid length. [ 377.571699][T13319] netlink: 'syz.1.1953': attribute type 1 has an invalid length. [ 377.662975][T13319] 8021q: adding VLAN 0 to HW filter on device bond5 [ 378.867139][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.165002][T13370] IPVS: set_ctl: invalid protocol: 2 224.0.0.2:0 [ 379.461510][T13375] netlink: 'syz.0.1972': attribute type 1 has an invalid length. [ 379.529387][T13375] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 379.964230][T13394] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 380.221214][T13382] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 380.739822][T13413] FAULT_INJECTION: forcing a failure. [ 380.739822][T13413] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 380.764413][T13413] CPU: 1 UID: 0 PID: 13413 Comm: syz.1.1983 Not tainted 6.14.0-rc7-syzkaller-01962-ga19f40d919ca #0 [ 380.764443][T13413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 380.764459][T13413] Call Trace: [ 380.764467][T13413] [ 380.764475][T13413] dump_stack_lvl+0x241/0x360 [ 380.764507][T13413] ? __pfx_dump_stack_lvl+0x10/0x10 [ 380.764530][T13413] ? __pfx__printk+0x10/0x10 [ 380.764556][T13413] ? snprintf+0xda/0x120 [ 380.764584][T13413] should_fail_ex+0x40a/0x550 [ 380.764621][T13413] _copy_to_user+0x31/0xb0 [ 380.764651][T13413] simple_read_from_buffer+0xca/0x150 [ 380.764683][T13413] proc_fail_nth_read+0x1e9/0x250 [ 380.764732][T13413] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 380.764766][T13413] ? rw_verify_area+0x243/0x630 [ 380.764787][T13413] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 380.764819][T13413] vfs_read+0x1f8/0xb40 [ 380.764843][T13413] ? fdget_pos+0x254/0x320 [ 380.764881][T13413] ? __pfx___mutex_lock+0x10/0x10 [ 380.764915][T13413] ? __pfx_vfs_read+0x10/0x10 [ 380.764940][T13413] ? __fget_files+0x2a/0x410 [ 380.764973][T13413] ? __fget_files+0x395/0x410 [ 380.765002][T13413] ? __fget_files+0x2a/0x410 [ 380.765043][T13413] ksys_read+0x18f/0x2b0 [ 380.765068][T13413] ? __pfx_ksys_read+0x10/0x10 [ 380.765091][T13413] ? do_syscall_64+0x100/0x230 [ 380.765127][T13413] ? do_syscall_64+0xb6/0x230 [ 380.765163][T13413] do_syscall_64+0xf3/0x230 [ 380.765195][T13413] ? clear_bhb_loop+0x35/0x90 [ 380.765228][T13413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.765264][T13413] RIP: 0033:0x7f101ab8bb7c [ 380.765282][T13413] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 380.765299][T13413] RSP: 002b:00007f101b9a5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 380.765322][T13413] RAX: ffffffffffffffda RBX: 00007f101ada5fa0 RCX: 00007f101ab8bb7c [ 380.765337][T13413] RDX: 000000000000000f RSI: 00007f101b9a50a0 RDI: 0000000000000005 [ 380.765350][T13413] RBP: 00007f101b9a5090 R08: 0000000000000000 R09: 0000000000000000 [ 380.765362][T13413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 380.765374][T13413] R13: 0000000000000000 R14: 00007f101ada5fa0 R15: 00007ffd0e7edc08 [ 380.765405][T13413] [ 381.330986][T13416] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 381.355277][T13418] netlink: 'syz.2.1985': attribute type 1 has an invalid length. [ 381.371423][T13418] netlink: 'syz.2.1985': attribute type 2 has an invalid length. [ 382.268822][T13437] __nla_validate_parse: 3 callbacks suppressed [ 382.268842][T13437] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1989'. [ 382.285054][T13437] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1989'. [ 382.342209][T13437] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1989'. [ 382.368657][T13437] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1989'. [ 382.564763][T13444] 8021q: VLANs not supported on pimreg [ 382.597810][T13444] netlink: 'syz.1.1991': attribute type 1 has an invalid length. [ 382.619777][T13444] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1991'. [ 382.640115][T13444] dvmrp0: left allmulticast mode [ 382.653145][T13444] pimreg: left allmulticast mode [ 383.194077][T13464] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1995'. [ 383.583466][T13487] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2000'. [ 383.605303][T13487] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2000'. [ 383.619296][T13487] netlink: 'syz.3.2000': attribute type 6 has an invalid length. [ 384.011814][T13500] netlink: 'syz.3.2004': attribute type 10 has an invalid length. [ 384.050847][T13507] openvswitch: netlink: Actions may not be safe on all matching packets [ 384.144540][T13514] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2009'. [ 384.169249][T13514] netlink: 'syz.0.2009': attribute type 1 has an invalid length. [ 384.187839][T13514] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2009'. [ 384.302308][T13521] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 385.519607][T13571] Cannot find set identified by id 65535 to match [ 385.562940][T13573] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 386.011855][T13590] openvswitch: netlink: Tunnel attr 228 out of range max 16 [ 386.379520][T13604] xt_ecn: cannot match TCP bits for non-tcp packets [ 386.399470][T13605] xt_ecn: cannot match TCP bits for non-tcp packets [ 386.483472][T13565] netlink: 'syz.4.2029': attribute type 13 has an invalid length. [ 387.094696][T13625] netlink: 'syz.2.2043': attribute type 1 has an invalid length. [ 387.136962][T13625] bond5: entered promiscuous mode [ 387.151716][T13625] 8021q: adding VLAN 0 to HW filter on device bond5 [ 387.319711][T13633] x_tables: duplicate underflow at hook 4 [ 387.352394][T13629] 8021q: adding VLAN 0 to HW filter on device bond5 [ 387.381192][T13633] __nla_validate_parse: 5 callbacks suppressed [ 387.381210][T13633] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2047'. [ 387.408021][T13629] bond5: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 387.428601][T13629] bond5: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 387.455394][T13629] bond5: (slave ip6gre1): making interface the new active one [ 387.472778][T13629] ip6gre1: entered promiscuous mode [ 387.479509][T13629] bond5: (slave ip6gre1): Enslaving as an active interface with an up link [ 387.673860][T13644] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2049'. [ 387.734982][T13645] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2049'. [ 387.802300][T13645] hsr_slave_0: left promiscuous mode [ 387.852018][T13645] 0·: left promiscuous mode [ 388.241911][T13668] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 388.554334][T13684] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2058'. [ 388.829946][T13700] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2062'. [ 388.839700][T13700] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 388.899541][T13700] netlink: 'syz.2.2062': attribute type 6 has an invalid length. [ 388.908447][T13701] netlink: 'syz.2.2062': attribute type 6 has an invalid length. [ 389.013606][T13708] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2065'. [ 389.236626][T13723] netlink: 'syz.3.2069': attribute type 20 has an invalid length. [ 389.748727][T13744] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2076'. [ 390.119487][T13764] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2082'. [ 390.141310][ T5846] Bluetooth: hci4: command 0x0405 tx timeout [ 390.274305][T13776] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2084'. [ 390.729713][T13792] netlink: 'syz.1.2088': attribute type 10 has an invalid length. [ 390.868827][T13792] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 391.054573][T13784] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2085'. [ 391.183586][T13800] caif0: entered allmulticast mode [ 391.349850][T13808] batadv1: entered promiscuous mode [ 391.377243][T13808] batadv1: entered allmulticast mode [ 391.391899][T13808] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 391.752539][T13826] netlink: 'syz.2.2102': attribute type 10 has an invalid length. [ 391.993899][T13839] netlink: 'syz.3.2105': attribute type 7 has an invalid length. [ 392.076154][T13843] tipc: MTU too low for tipc bearer [ 392.574477][T13856] __nla_validate_parse: 6 callbacks suppressed [ 392.574496][T13856] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.2112'. [ 392.624264][T13856] netlink: zone id is out of range [ 392.629524][T13856] netlink: get zone limit has 8 unknown bytes [ 392.662922][T13856] netlink: 1256 bytes leftover after parsing attributes in process `syz.1.2112'. [ 392.757612][T13862] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2113'. [ 392.787796][T13862] xt_cgroup: path and classid specified [ 392.848534][T13865] bond0: entered promiscuous mode [ 392.872560][T13865] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode [ 392.883029][T13865] batadv0: entered promiscuous mode [ 392.889224][T13871] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2116'. [ 392.955401][T13877] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2118'. [ 392.969228][T13877] gtp1: entered promiscuous mode [ 392.974389][T13877] gtp1: entered allmulticast mode [ 392.991552][T13878] 8021q: VLANs not supported on syzkaller1 [ 393.183655][T13881] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2120'. [ 393.204667][T13881] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2120'. [ 393.853297][T13901] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2125'. [ 394.037726][T13906] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2128'. [ 394.125960][T13916] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2129'. [ 395.886628][ T5895] IPVS: starting estimator thread 0... [ 395.907617][T13918] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 396.001096][T13967] IPVS: using max 20 ests per chain, 48000 per kthread [ 396.241269][T13977] netlink: 'syz.4.2145': attribute type 1 has an invalid length. [ 397.409077][T14011] netlink: 'syz.2.2154': attribute type 1 has an invalid length. [ 397.580863][T14019] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 397.733964][T14022] openvswitch: netlink: Actions may not be safe on all matching packets [ 397.854216][T14026] vlan0: entered promiscuous mode [ 398.234972][T14037] __nla_validate_parse: 10 callbacks suppressed [ 398.234994][T14037] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2164'. [ 398.268812][T14048] netlink: 'syz.0.2169': attribute type 9 has an invalid length. [ 398.516709][T14064] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2174'. [ 398.526069][T14064] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2174'. [ 398.536230][T14064] netlink: 'syz.1.2174': attribute type 15 has an invalid length. [ 399.137613][T14088] xt_CT: No such helper "snmp" [ 399.292859][T14088] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2180'. [ 399.670727][T14097] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2182'. [ 400.164806][T14120] netlink: 'syz.3.2189': attribute type 1 has an invalid length. [ 400.320566][T14126] netlink: 120 bytes leftover after parsing attributes in process `syz.4.2191'. [ 400.367532][T14126] netlink: 'syz.4.2191': attribute type 1 has an invalid length. [ 400.385559][T14126] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2191'. [ 400.587928][T14135] netlink: 'syz.4.2193': attribute type 4 has an invalid length. [ 400.665361][T14135] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2193'. [ 401.036019][T14150] netem: change failed [ 401.356954][T14161] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2200'. [ 401.377175][T14160] x_tables: duplicate underflow at hook 2 [ 401.630307][T14167] netlink: 2992 bytes leftover after parsing attributes in process `syz.0.2204'. [ 401.888105][T14178] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 402.299144][T14204] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 402.405888][T14198] ip6tnl2: entered promiscuous mode [ 402.411268][T14198] ip6tnl2: entered allmulticast mode [ 402.745499][T14211] smc: removing ib device syz1 [ 403.145683][T14224] netlink: 'syz.2.2222': attribute type 32 has an invalid length. [ 403.312025][T14232] netlink: 'syz.4.2223': attribute type 21 has an invalid length. [ 403.339886][T14233] __nla_validate_parse: 2 callbacks suppressed [ 403.339904][T14233] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2225'. [ 403.380786][T14233] openvswitch: netlink: nsh attribute has 65535 unknown bytes. [ 403.456564][T14233] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 403.787210][T14257] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2230'. [ 404.368500][T14274] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2237'. [ 404.523584][T14285] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2241'. [ 404.574583][T14285] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 404.591262][T14285] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 405.052746][T14281] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2240'. [ 405.422047][T14319] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2251'. [ 405.741372][T14332] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2254'. [ 406.015548][T14334] sch_tbf: burst 88 is lower than device veth15 mtu (1514) ! [ 406.420389][T14353] netlink: zone id is out of range [ 406.692648][T14353] netlink: set zone limit has 4 unknown bytes [ 406.698491][T14360] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 406.906358][T14365] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2262'. [ 406.973537][T14368] netlink: 'syz.2.2263': attribute type 1 has an invalid length. [ 407.055929][T14368] bond6: entered promiscuous mode [ 407.065273][T14368] 8021q: adding VLAN 0 to HW filter on device bond6 [ 407.716548][T14387] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2268'. [ 408.094738][T14405] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2271'. [ 408.390552][T14421] openvswitch: netlink: nsh attribute has 16 unknown bytes. [ 408.425522][T14421] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 408.649144][T14433] __nla_validate_parse: 3 callbacks suppressed [ 408.649164][T14433] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2280'. [ 408.655557][T14435] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2279'. [ 408.726959][T14436] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2279'. [ 408.828694][T14440] netlink: 'syz.2.2281': attribute type 2 has an invalid length. [ 409.028573][T14450] xt_TCPMSS: Only works on TCP SYN packets [ 409.113477][T14457] netlink: 'syz.1.2286': attribute type 11 has an invalid length. [ 409.188754][T14459] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2287'. [ 409.194956][T14462] netlink: 'syz.2.2287': attribute type 58 has an invalid length. [ 409.206117][T14462] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2287'. [ 409.221083][T14459] netlink: 'syz.2.2287': attribute type 1 has an invalid length. [ 409.481516][T14479] openvswitch: netlink: Flow actions attr not present in new flow. [ 409.524318][T14482] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2293'. [ 410.308442][T14515] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2302'. [ 410.331881][T14516] netlink: 'syz.3.2303': attribute type 11 has an invalid length. [ 410.405003][T14519] netlink: 'syz.0.2304': attribute type 3 has an invalid length. [ 410.449174][T14519] netlink: 666 bytes leftover after parsing attributes in process `syz.0.2304'. [ 410.642638][T14528] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2308'. [ 411.017257][T14549] vlan3: entered allmulticast mode [ 411.029550][T14549] bond0: entered allmulticast mode [ 411.039685][T14549] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode [ 411.061141][T14549] netlink: 7 bytes leftover after parsing attributes in process `syz.1.2314'. [ 411.529111][T14583] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 412.180477][T14613] gretap4: entered promiscuous mode [ 412.402534][T14618] hsr_slave_0 (unregistering): left promiscuous mode [ 413.261094][ T5846] Bluetooth: hci4: command 0x0405 tx timeout [ 413.314583][T14662] netlink: 'syz.2.2350': attribute type 10 has an invalid length. [ 413.324270][T14662] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.358858][T14662] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.411668][T14662] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.419915][T14662] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.503161][T14662] team0: Port device geneve0 added [ 413.711996][T14687] netlink: 'syz.1.2357': attribute type 4 has an invalid length. [ 413.886052][T14700] __nla_validate_parse: 8 callbacks suppressed [ 413.886071][T14700] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2360'. [ 413.902207][T14700] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2360'. [ 414.008882][T14704] Bluetooth: MGMT ver 1.23 [ 414.051902][T14700] bridge5: the hash_elasticity option has been deprecated and is always 16 [ 414.059194][T14709] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 414.226400][T14709] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2363'. [ 414.687879][T14724] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2367'. [ 414.834503][T14728] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2367'. [ 415.159487][T14739] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2369'. [ 416.102034][T14768] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2378'. [ 416.484545][T14780] netlink: 'syz.2.2380': attribute type 10 has an invalid length. [ 416.571226][T14784] IPVS: length: 97 != 24 [ 416.808062][T14793] netlink: 'syz.4.2385': attribute type 11 has an invalid length. [ 416.826692][T14793] netlink: 216 bytes leftover after parsing attributes in process `syz.4.2385'. [ 417.406887][T14790] ipip0: left promiscuous mode [ 417.426660][T14790] ipvlan2: left allmulticast mode [ 417.438314][T14790] macsec0: left allmulticast mode [ 417.454150][T14793] IPv6: Can't replace route, no match found [ 417.466691][T14791] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 417.578334][T14809] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2388'. [ 417.684148][T14809] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2388'. [ 417.773483][T14817] lo speed is unknown, defaulting to 1000 [ 417.818415][T14817] lo speed is unknown, defaulting to 1000 [ 417.825565][T14817] lo speed is unknown, defaulting to 1000 [ 417.856294][T14817] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 417.871790][T14819] netlink: 'syz.3.2390': attribute type 10 has an invalid length. [ 417.940580][T14817] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 418.031942][T14817] lo speed is unknown, defaulting to 1000 [ 418.042650][T14817] lo speed is unknown, defaulting to 1000 [ 418.075139][T14817] lo speed is unknown, defaulting to 1000 [ 418.112164][T14817] lo speed is unknown, defaulting to 1000 [ 418.119099][T14817] lo speed is unknown, defaulting to 1000 [ 418.274538][T14817] lo speed is unknown, defaulting to 1000 [ 418.431279][T14848] netlink: 'syz.3.2398': attribute type 1 has an invalid length. [ 418.466200][T14853] netlink: 'syz.3.2398': attribute type 1 has an invalid length. [ 418.532668][T14859] netlink: 'syz.3.2398': attribute type 1 has an invalid length. [ 418.700410][T14865] x_tables: duplicate underflow at hook 2 [ 418.739038][T14865] netlink: 'syz.0.2403': attribute type 322 has an invalid length. [ 418.753407][T14872] netlink: 'syz.3.2404': attribute type 4 has an invalid length. [ 419.117282][T14891] lo speed is unknown, defaulting to 1000 [ 419.229517][T14896] xt_recent: Unsupported userspace flags (00000042) [ 419.285104][T14903] netlink: 'syz.2.2414': attribute type 1 has an invalid length. [ 419.301343][T14903] netlink: 'syz.2.2414': attribute type 4 has an invalid length. [ 419.303098][T14902] netlink: 'syz.4.2413': attribute type 4 has an invalid length. [ 419.326595][T14903] __nla_validate_parse: 3 callbacks suppressed [ 419.326613][T14903] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2414'. [ 419.340598][T14902] xt_hashlimit: max too large, truncated to 1048576 [ 419.369765][T14903] NCSI netlink: No device for ifindex 458760 [ 419.372936][T14902] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2413'. [ 419.449862][T14906] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2412'. [ 419.484665][T14906] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 419.493193][T14906] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 419.511441][T14906] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 419.519746][T14906] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 419.621776][T14912] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2416'. [ 420.180046][T14932] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2422'. [ 420.303770][T14937] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2424'. [ 420.334390][T14937] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2424'. [ 420.343516][T14937] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2424'. [ 420.449254][T14941] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 420.493350][T14945] delete_channel: no stack [ 420.788255][T14964] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2431'. [ 420.789615][T14962] pimreg: entered allmulticast mode [ 420.830126][T14962] lo: left allmulticast mode [ 423.953850][T14960] pimreg: left allmulticast mode [ 424.056436][T14975] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2438'. [ 424.648328][T15011] validate_nla: 2 callbacks suppressed [ 424.648349][T15011] netlink: 'syz.3.2446': attribute type 1 has an invalid length. [ 424.974248][T15035] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2447'. [ 425.194242][T15045] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2451'. [ 425.232710][T15045] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 425.520060][T15066] lo speed is unknown, defaulting to 1000 [ 425.584302][T15074] openvswitch: netlink: Multiple metadata blocks provided [ 426.004425][T15086] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2462'. [ 426.343187][T15101] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2464'. [ 426.411747][T15106] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 426.413370][T15101] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20001 [ 426.486958][T15101] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2464'. [ 426.550018][T15112] x_tables: duplicate underflow at hook 2 [ 426.812206][T15121] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2470'. [ 426.867676][T15121] Cannot find add_set index 2 as target [ 426.891143][T15125] Cannot find add_set index 2 as target [ 427.466944][T15160] ip6t_srh: unknown srh match flags 5294 [ 427.612346][T15169] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2480'. [ 427.810672][T15151] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2473'. [ 427.826804][T15168] bond0: (slave wlan1): Releasing backup interface [ 427.865357][T15168] tipc: Resetting bearer [ 428.348547][T15206] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615) [ 428.371491][T15206] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 428.413176][T15195] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 428.454397][T15212] netlink: 'syz.1.2489': attribute type 30 has an invalid length. [ 428.481451][T15212] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 428.490643][T15212] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 428.516196][T15214] x_tables: duplicate underflow at hook 2 [ 428.746853][T15222] netlink: 1256 bytes leftover after parsing attributes in process `syz.0.2493'. [ 428.760959][T15222] openvswitch: netlink: Unexpected mask (mask=4, allowed=10048) [ 428.982113][T15237] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2497'. [ 429.146286][T15244] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 429.647429][T15261] xt_hashlimit: size too large, truncated to 1048576 [ 429.715165][T15261] warn_alloc: 1 callbacks suppressed [ 429.715185][T15261] syz.1.2503: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 429.791055][T15261] CPU: 0 UID: 0 PID: 15261 Comm: syz.1.2503 Not tainted 6.14.0-rc7-syzkaller-01962-ga19f40d919ca #0 [ 429.791085][T15261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 429.791099][T15261] Call Trace: [ 429.791107][T15261] [ 429.791115][T15261] dump_stack_lvl+0x241/0x360 [ 429.791148][T15261] ? __pfx_dump_stack_lvl+0x10/0x10 [ 429.791172][T15261] ? __pfx__printk+0x10/0x10 [ 429.791199][T15261] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 429.791228][T15261] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 429.791268][T15261] warn_alloc+0x278/0x410 [ 429.791297][T15261] ? __pfx_warn_alloc+0x10/0x10 [ 429.791327][T15261] ? htable_create+0x10c/0x890 [ 429.791350][T15261] ? __get_vm_area_node+0x1c8/0x2d0 [ 429.791382][T15261] ? __get_vm_area_node+0x25c/0x2d0 [ 429.791422][T15261] __vmalloc_node_range_noprof+0x62f/0x1380 [ 429.791487][T15261] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 429.791508][T15261] ? rcu_is_watching+0x15/0xb0 [ 429.791533][T15261] ? __kmalloc_node_noprof+0x2ad/0x4d0 [ 429.791565][T15261] ? __kvmalloc_node_noprof+0x72/0x190 [ 429.791602][T15261] __kvmalloc_node_noprof+0x142/0x190 [ 429.791634][T15261] ? htable_create+0x10c/0x890 [ 429.791658][T15261] htable_create+0x10c/0x890 [ 429.791689][T15261] hashlimit_mt_check_common+0x710/0xa40 [ 429.791722][T15261] hashlimit_mt_check_v1+0x2ea/0x540 [ 429.791749][T15261] ? __pfx_hashlimit_mt_check_v1+0x10/0x10 [ 429.791770][T15261] ? trace_contention_end+0x3c/0x120 [ 429.791800][T15261] ? cpus_read_unlock+0xa6/0x140 [ 429.791825][T15261] ? __mutex_unlock_slowpath+0x227/0x800 [ 429.791862][T15261] xt_check_match+0x368/0xa40 [ 429.791885][T15261] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 429.791918][T15261] ? __pfx_xt_check_match+0x10/0x10 [ 429.791954][T15261] ? xt_find_match+0x1df/0x230 [ 429.791983][T15261] translate_table+0x1704/0x2490 [ 429.792045][T15261] ? __pfx_translate_table+0x10/0x10 [ 429.792076][T15261] ? __might_fault+0xaa/0x120 [ 429.792098][T15261] ? __pfx_lock_release+0x10/0x10 [ 429.792136][T15261] ? __virt_addr_valid+0x183/0x530 [ 429.792161][T15261] ? __might_fault+0xc6/0x120 [ 429.792187][T15261] ? copy_from_sockptr_offset+0x6b/0xb0 [ 429.792222][T15261] do_ip6t_set_ctl+0xe4c/0x1270 [ 429.792267][T15261] ? nf_setsockopt+0x240/0x2c0 [ 429.792287][T15261] ? aa_label_sk_perm+0x4f3/0x6c0 [ 429.792316][T15261] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 429.792350][T15261] ? rcu_is_watching+0x15/0xb0 [ 429.792373][T15261] ? trace_contention_end+0x3c/0x120 [ 429.792408][T15261] ? __mutex_unlock_slowpath+0x227/0x800 [ 429.792450][T15261] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 429.792491][T15261] ? futex_wait+0x285/0x360 [ 429.792531][T15261] nf_setsockopt+0x295/0x2c0 [ 429.792561][T15261] rawv6_setsockopt+0x2ac/0x690 [ 429.792587][T15261] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 429.792611][T15261] ? aa_sock_opt_perm+0x79/0x120 [ 429.792643][T15261] ? sock_common_setsockopt+0x37/0xc0 [ 429.792667][T15261] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 429.792687][T15261] do_sock_setsockopt+0x3af/0x720 [ 429.792716][T15261] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 429.792749][T15261] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 429.792790][T15261] __x64_sys_setsockopt+0x1ee/0x280 [ 429.792824][T15261] do_syscall_64+0xf3/0x230 [ 429.792856][T15261] ? clear_bhb_loop+0x35/0x90 [ 429.792890][T15261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.792918][T15261] RIP: 0033:0x7f101ab8d169 [ 429.792936][T15261] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 429.792954][T15261] RSP: 002b:00007f101b9a5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 429.792976][T15261] RAX: ffffffffffffffda RBX: 00007f101ada5fa0 RCX: 00007f101ab8d169 [ 429.792990][T15261] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000006 [ 429.793002][T15261] RBP: 00007f101ac0e2a0 R08: 00000000000004c0 R09: 0000000000000000 [ 429.793014][T15261] R10: 0000200000000980 R11: 0000000000000246 R12: 0000000000000000 [ 429.793027][T15261] R13: 0000000000000000 R14: 00007f101ada5fa0 R15: 00007ffd0e7edc08 [ 429.793059][T15261] [ 429.800792][T15269] xt_TCPMSS: Only works on TCP SYN packets [ 429.816888][T15261] Mem-Info: [ 430.089213][T15274] xt_hashlimit: size too large, truncated to 1048576 [ 430.131064][T15261] active_anon:11650 inactive_anon:0 isolated_anon:0 [ 430.131064][T15261] active_file:1606 inactive_file:38429 isolated_file:0 [ 430.131064][T15261] unevictable:768 dirty:38 writeback:0 [ 430.131064][T15261] slab_reclaimable:11905 slab_unreclaimable:107454 [ 430.131064][T15261] mapped:29569 shmem:5389 pagetables:820 [ 430.131064][T15261] sec_pagetables:0 bounce:0 [ 430.131064][T15261] kernel_misc_reclaimable:0 [ 430.131064][T15261] free:1323945 free_pcp:326 free_cma:0 [ 430.293641][T15275] xt_hashlimit: size too large, truncated to 1048576 [ 430.313134][T15261] Node 0 active_anon:38476kB inactive_anon:0kB active_file:6424kB inactive_file:153644kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118224kB dirty:192kB writeback:0kB shmem:11940kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11224kB pagetables:2964kB sec_pagetables:0kB all_unreclaimable? no [ 430.360633][T15276] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2506'. [ 430.381698][T15276] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2506'. [ 430.405258][T15276] gretap2: entered promiscuous mode [ 430.410543][T15276] gretap2: entered allmulticast mode [ 430.435908][T15279] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2508'. [ 430.441062][T15261] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 430.519370][T15261] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 430.604618][T15261] lowmem_reserve[]: 0 2489 2490 2490 2490 [ 430.607439][T15286] lo speed is unknown, defaulting to 1000 [ 430.620700][T15261] Node 0 DMA32 free:1381764kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB active_anon:30636kB inactive_anon:0kB active_file:6424kB inactive_file:153328kB unevictable:1536kB writepending:192kB present:3129332kB managed:2549656kB mlocked:0kB bounce:0kB free_pcp:7356kB local_pcp:5384kB free_cma:0kB [ 430.664928][T15261] lowmem_reserve[]: 0 0 0 0 0 [ 430.673712][T15261] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:316kB unevictable:0kB writepending:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 430.719256][T15261] lowmem_reserve[]: 0 0 0 0 0 [ 430.730040][T15261] Node 1 Normal free:3909212kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 430.813501][T15261] lowmem_reserve[]: 0 0 0 0 0 [ 430.818307][T15261] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 430.845573][T15261] Node 0 DMA32: 551*4kB (UME) 321*8kB (UME) 293*16kB (UME) 728*32kB (UME) 1190*64kB (UME) 590*128kB (UME) 317*256kB (UME) 317*512kB (UM) 171*1024kB (UM) 9*2048kB (UME) 186*4096kB (UM) = 1383284kB [ 430.874699][T15261] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 430.934922][T15261] Node 1 Normal: 195*4kB (UM) 60*8kB (UME) 47*16kB (UME) 178*32kB (UME) 79*64kB (UME) 31*128kB (UME) 13*256kB (UME) 10*512kB (UM) 7*1024kB (UME) 3*2048kB (UE) 945*4096kB (M) = 3909212kB [ 430.977120][T15261] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 430.997347][T15261] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 430.997599][T15303] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 431.031349][T15261] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 431.087992][T15261] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 431.121354][T15261] 41646 total pagecache pages [ 431.126177][T15261] 0 pages in swap cache [ 431.130350][T15261] Free swap = 124996kB [ 431.172569][T15307] lo speed is unknown, defaulting to 1000 [ 431.181585][T15261] Total swap = 124996kB [ 431.185790][T15261] 2097051 pages RAM [ 431.189665][T15261] 0 pages HighMem/MovableOnly [ 431.221338][T15261] 427915 pages reserved [ 431.225553][T15261] 0 pages cma reserved [ 431.621252][T15328] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2520'. [ 431.815237][T15333] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2522'. [ 431.989513][T15342] lo speed is unknown, defaulting to 1000 [ 432.474715][T15373] bridge0: port 2(vlan3) entered blocking state [ 432.518490][T15373] bridge0: port 2(vlan3) entered disabled state [ 432.532188][T15373] vlan3: entered allmulticast mode [ 432.537715][T15373] bridge0: entered allmulticast mode [ 432.562153][T15373] vlan3: left allmulticast mode [ 432.567199][T15373] bridge0: left allmulticast mode [ 432.602679][T15378] netlink: 596 bytes leftover after parsing attributes in process `syz.1.2532'. [ 432.631612][T15370] netlink: 'syz.1.2532': attribute type 29 has an invalid length. [ 432.697648][T15376] netlink: 'syz.1.2532': attribute type 29 has an invalid length. [ 433.278695][T15394] lo speed is unknown, defaulting to 1000 [ 433.567116][T15410] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2542'. [ 433.576444][T15410] netlink: 'syz.4.2542': attribute type 7 has an invalid length. [ 433.591067][T15410] netlink: 'syz.4.2542': attribute type 8 has an invalid length. [ 433.630851][T15410] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2542'. [ 433.686854][T15410] ip6gretap0: entered promiscuous mode [ 433.739071][T15410] ip6gretap0: left promiscuous mode [ 433.785672][T15414] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2543'. [ 434.025585][T15430] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 434.047750][T15431] IPv6: Can't replace route, no match found [ 434.284851][T15438] netlink: 'syz.1.2551': attribute type 1 has an invalid length. [ 434.330616][T15438] netlink: 'syz.1.2551': attribute type 1 has an invalid length. [ 434.342960][T15439] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2550'. [ 434.358595][T15439] netlink: 'syz.4.2550': attribute type 1 has an invalid length. [ 434.489065][ T5850] block nbd1: Receive control failed (result -107) [ 434.502359][T15442] pimreg: entered allmulticast mode [ 434.540764][T15442] pimreg: left allmulticast mode [ 434.721643][T15442] netpci0: tun_chr_ioctl cmd 1074025672 [ 434.744619][T15442] netpci0: ignored: set checksum disabled [ 435.414759][T15477] batman_adv: batadv0: Adding interface: dummy0 [ 435.432671][T15477] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 435.469921][T15476] pim6reg1: entered promiscuous mode [ 435.482159][T15476] pim6reg1: entered allmulticast mode [ 435.864138][T15493] netlink: 'syz.0.2567': attribute type 1 has an invalid length. [ 435.876078][T15494] __nla_validate_parse: 6 callbacks suppressed [ 435.876097][T15494] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2566'. [ 435.883265][T15493] openvswitch: netlink: Message has 16 unknown bytes. [ 436.111377][T15496] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2568'. [ 436.220261][T15511] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2571'. [ 436.444872][T15518] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2572'. [ 436.692843][T15523] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2574'. [ 436.753460][T15531] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2576'. [ 437.251240][T15557] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2584'. [ 437.314388][T15562] netlink: zone id is out of range [ 437.335375][T15562] netlink: zone id is out of range [ 437.354039][T15562] netlink: zone id is out of range [ 437.376360][T15562] netlink: zone id is out of range [ 437.740555][T15571] FAULT_INJECTION: forcing a failure. [ 437.740555][T15571] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 437.832876][T15571] CPU: 1 UID: 0 PID: 15571 Comm: syz.1.2585 Not tainted 6.14.0-rc7-syzkaller-01962-ga19f40d919ca #0 [ 437.832905][T15571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 437.832917][T15571] Call Trace: [ 437.832924][T15571] [ 437.832932][T15571] dump_stack_lvl+0x241/0x360 [ 437.832961][T15571] ? __pfx_dump_stack_lvl+0x10/0x10 [ 437.832981][T15571] ? __pfx__printk+0x10/0x10 [ 437.833007][T15571] ? snprintf+0xda/0x120 [ 437.833033][T15571] should_fail_ex+0x40a/0x550 [ 437.833068][T15571] _copy_to_user+0x31/0xb0 [ 437.833097][T15571] simple_read_from_buffer+0xca/0x150 [ 437.833127][T15571] proc_fail_nth_read+0x1e9/0x250 [ 437.833158][T15571] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 437.833189][T15571] ? rw_verify_area+0x243/0x630 [ 437.833209][T15571] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 437.833238][T15571] vfs_read+0x1f8/0xb40 [ 437.833259][T15571] ? fdget_pos+0x254/0x320 [ 437.833288][T15571] ? __pfx___mutex_lock+0x10/0x10 [ 437.833319][T15571] ? __pfx_vfs_read+0x10/0x10 [ 437.833373][T15571] ? __fget_files+0x2a/0x410 [ 437.833420][T15571] ? __fget_files+0x395/0x410 [ 437.833448][T15571] ? __fget_files+0x2a/0x410 [ 437.833488][T15571] ksys_read+0x18f/0x2b0 [ 437.833512][T15571] ? __pfx_ksys_read+0x10/0x10 [ 437.833534][T15571] ? do_syscall_64+0x100/0x230 [ 437.833569][T15571] ? do_syscall_64+0xb6/0x230 [ 437.833603][T15571] do_syscall_64+0xf3/0x230 [ 437.833635][T15571] ? clear_bhb_loop+0x35/0x90 [ 437.833676][T15571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.833704][T15571] RIP: 0033:0x7f101ab8bb7c [ 437.833723][T15571] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 437.833740][T15571] RSP: 002b:00007f101b963030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 437.833761][T15571] RAX: ffffffffffffffda RBX: 00007f101ada6160 RCX: 00007f101ab8bb7c [ 437.833776][T15571] RDX: 000000000000000f RSI: 00007f101b9630a0 RDI: 0000000000000004 [ 437.833788][T15571] RBP: 00007f101b963090 R08: 0000000000000000 R09: 0000000000000000 [ 437.833800][T15571] R10: 0000200000001400 R11: 0000000000000246 R12: 0000000000000001 [ 437.833813][T15571] R13: 0000000000000001 R14: 00007f101ada6160 R15: 00007ffd0e7edc08 [ 437.833843][T15571] [ 437.905363][T15580] lo speed is unknown, defaulting to 1000 [ 438.160263][T15591] netlink: 'syz.0.2591': attribute type 1 has an invalid length. [ 438.293440][T15600] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2594'. [ 438.628254][T15632] lo speed is unknown, defaulting to 1000 [ 438.993171][T15646] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2601'. [ 439.003801][T15646] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2601'. [ 439.491654][T15665] netlink: 'syz.2.2608': attribute type 10 has an invalid length. [ 439.539422][T15665] macvlan0: entered allmulticast mode [ 439.582819][T15665] veth1_vlan: entered allmulticast mode [ 439.602423][T15665] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 440.032012][T15680] 8021q: adding VLAN 0 to HW filter on device bond7 [ 440.040620][T15680] bond0: (slave bond7): Enslaving as an active interface with an up link [ 440.165944][T15689] lo speed is unknown, defaulting to 1000 [ 440.319094][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.438118][T15698] delete_channel: no stack [ 440.493578][T15701] netlink: 'syz.1.2618': attribute type 3 has an invalid length. [ 440.720736][T15711] SET target dimension over the limit! [ 440.848812][T15705] lo speed is unknown, defaulting to 1000 [ 440.926706][T15720] __nla_validate_parse: 3 callbacks suppressed [ 440.926948][T15720] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2624'. [ 441.186604][T15724] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2625'. [ 441.272969][T15727] sch_tbf: peakrate 6 is lower than or equals to rate 1906100105998558218 ! [ 441.311950][T15724] netem: change failed [ 441.355028][T15728] lo speed is unknown, defaulting to 1000 [ 441.620058][T15734] netlink: 'syz.4.2628': attribute type 1 has an invalid length. [ 441.726483][T15734] 8021q: adding VLAN 0 to HW filter on device bond4 [ 441.961294][T15753] netlink: 'syz.4.2632': attribute type 1 has an invalid length. [ 442.029299][T15753] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2632'. [ 442.236204][T15769] vlan0: entered promiscuous mode [ 442.395842][T15775] netlink: 'syz.3.2637': attribute type 7 has an invalid length. [ 442.450258][T15778] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2638'. [ 442.513780][T15778] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2638'. [ 442.542562][T15778] gretap0: left allmulticast mode [ 442.555707][T15778] gretap0: left promiscuous mode [ 442.566950][T15778] bridge0: port 2(gretap0) entered disabled state [ 442.697784][T15778] batadv1: left allmulticast mode [ 442.718812][T15778] batadv1: left promiscuous mode [ 442.742718][T15778] bridge0: port 1(batadv1) entered disabled state [ 443.197702][T15805] vlan3: entered allmulticast mode [ 443.220995][T15805] hsr0: entered allmulticast mode [ 443.226688][T15805] hsr_slave_0: entered allmulticast mode [ 443.232647][T15805] hsr_slave_1: entered allmulticast mode [ 443.329777][T15814] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 443.351944][T15814] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 443.385149][T15805] vlan3: entered allmulticast mode [ 443.552313][T15821] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2652'. [ 443.576988][T15821] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2652'. [ 443.709240][T15823] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2653'. [ 443.776859][T15825] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2654'. [ 443.793927][T15825] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2654'. [ 444.118935][T15845] netlink: 'syz.1.2659': attribute type 10 has an invalid length. [ 444.259545][T15851] lo speed is unknown, defaulting to 1000 [ 444.819756][T15876] netlink: 'syz.3.2668': attribute type 10 has an invalid length. [ 444.851345][T15876] : mtu greater than device maximum [ 444.856690][T15876] bond0: (slave ): Error -22 calling dev_set_mtu [ 445.533239][T15913] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 445.708429][T15926] lo speed is unknown, defaulting to 1000 [ 445.783749][T15934] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 445.798089][T15930] lo speed is unknown, defaulting to 1000 [ 446.448757][T15955] netlink: 'syz.3.2687': attribute type 58 has an invalid length. [ 446.464645][T15955] __nla_validate_parse: 4 callbacks suppressed [ 446.464663][T15955] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2687'. [ 446.680727][T15965] netlink: 'syz.4.2690': attribute type 4 has an invalid length. [ 446.765787][T15965] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2690'. [ 447.062798][T15978] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2693'. [ 447.073644][T15978] netlink: 'syz.4.2693': attribute type 2 has an invalid length. [ 447.282908][T15996] dccp_invalid_packet: P.type (RESET) not Data || [Data]Ack, while P.X == 0 [ 447.391301][T15999] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2698'. [ 447.416752][T15999] wg1: entered promiscuous mode [ 447.428339][T15999] wg1: entered allmulticast mode [ 447.719487][T16010] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2701'. [ 447.733489][T16010] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2701'. [ 448.272823][T16034] smc: adding net device pim6reg1 with user defined pnetid SYZ2 [ 448.312316][T16034] syzkaller0: Caught tx_queue_len zero misconfig [ 448.370271][T16033] smc: removing net device pim6reg1 with user defined pnetid SYZ2 [ 448.764707][T16052] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2712'. [ 448.781485][T16021] dccp_close: ABORT with 40 bytes unread [ 449.330261][T16076] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 449.355033][T16076] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 449.531481][T16082] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2733'. [ 449.559848][T16082] nbd: socks must be embedded in a SOCK_ITEM attr [ 449.639647][T16088] lo speed is unknown, defaulting to 1000 [ 449.645914][T16088] lo speed is unknown, defaulting to 1000 [ 449.652359][T16088] lo speed is unknown, defaulting to 1000 [ 449.665961][T16088] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 449.677674][T16087] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2724'. [ 449.727086][T16088] lo speed is unknown, defaulting to 1000 [ 449.740010][T16088] lo speed is unknown, defaulting to 1000 [ 449.753921][T16088] lo speed is unknown, defaulting to 1000 [ 449.762548][T16088] lo speed is unknown, defaulting to 1000 [ 449.769957][T16088] lo speed is unknown, defaulting to 1000 [ 450.089251][T16101] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2727'. [ 450.119606][T16102] sctp: [Deprecated]: syz.4.2728 (pid 16102) Use of struct sctp_assoc_value in delayed_ack socket option. [ 450.119606][T16102] Use struct sctp_sack_info instead [ 450.419506][T16114] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20001 [ 450.655893][T16120] syzkaller1: entered promiscuous mode [ 450.663357][T16120] syzkaller1: entered allmulticast mode [ 450.944714][T16134] netlink: 'syz.0.2738': attribute type 7 has an invalid length. [ 450.960515][T16134] netlink: 'syz.0.2738': attribute type 8 has an invalid length. [ 451.082516][T16139] netlink: 'syz.3.2739': attribute type 1 has an invalid length. [ 451.091078][T16142] netlink: 'syz.3.2739': attribute type 1 has an invalid length. [ 451.135348][T16143] lo speed is unknown, defaulting to 1000 [ 451.153198][T16143] lo speed is unknown, defaulting to 1000 [ 451.520480][T16161] xt_CT: No such helper "snmp" [ 451.633638][T16173] __nla_validate_parse: 16 callbacks suppressed [ 451.633661][T16173] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2748'. [ 451.917386][T16193] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2752'. [ 452.096057][T16141] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2740'. [ 452.244049][T16141] 8021q: adding VLAN 0 to HW filter on device bond0 [ 452.249197][T16201] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 452.311594][T16141] 8021q: adding VLAN 0 to HW filter on device team0 [ 452.477659][T16141] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 452.559727][T16213] lo speed is unknown, defaulting to 1000 [ 452.574235][T16213] lo speed is unknown, defaulting to 1000 [ 452.700031][T16219] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2757'. [ 452.709358][T16219] netlink: 'syz.4.2757': attribute type 21 has an invalid length. [ 452.866822][T16221] netlink: 'syz.3.2758': attribute type 29 has an invalid length. [ 452.924800][T16221] netlink: 'syz.3.2758': attribute type 29 has an invalid length. [ 452.948928][T16221] netlink: 516 bytes leftover after parsing attributes in process `syz.3.2758'. [ 452.969099][T16221] unsupported nla_type 58 [ 453.247369][T16231] lo speed is unknown, defaulting to 1000 [ 453.255331][T16231] lo speed is unknown, defaulting to 1000 [ 453.712539][T16243] netlink: 112 bytes leftover after parsing attributes in process `syz.1.2764'. [ 453.937084][T16245] lo speed is unknown, defaulting to 1000 [ 453.956759][T16245] lo speed is unknown, defaulting to 1000 [ 454.061681][T16248] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2766'. [ 454.081155][T16248] tc_dump_action: action bad kind [ 454.435381][T16257] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2769'. [ 454.540145][T16245] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2765'. [ 454.546693][T16260] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2771'. [ 454.566498][T16245] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 454.630145][T16246] lo speed is unknown, defaulting to 1000 [ 454.662273][T16246] lo speed is unknown, defaulting to 1000 [ 454.686045][T16262] xt_l2tp: missing protocol rule (udp|l2tpip) [ 454.754402][T16265] tipc: New replicast peer: 255.255.255.255 [ 454.776755][T16265] tipc: Enabled bearer , priority 10 [ 454.812833][T16265] macvlan1: entered promiscuous mode [ 454.852649][T16265] ipvlan0: entered promiscuous mode [ 454.902268][T16265] ipvlan0: left promiscuous mode [ 454.915198][T16265] macvlan1: left promiscuous mode [ 454.970725][T16272] lo speed is unknown, defaulting to 1000 [ 455.030166][T16272] lo speed is unknown, defaulting to 1000 [ 455.481370][T16285] syzkaller1: entered promiscuous mode [ 455.497159][T16285] syzkaller1: entered allmulticast mode [ 455.572938][T16290] lo speed is unknown, defaulting to 1000 [ 455.579945][T16290] lo speed is unknown, defaulting to 1000 [ 455.771815][T16271] xt_TCPMSS: Only works on TCP SYN packets [ 456.384791][T16313] tipc: Resetting bearer [ 456.497460][T16319] vlan0: entered promiscuous mode [ 456.683629][T16322] IPVS: Error connecting to the multicast addr [ 457.103130][T16339] __nla_validate_parse: 6 callbacks suppressed [ 457.103150][T16339] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2790'. [ 457.666702][T16356] netlink: 6 bytes leftover after parsing attributes in process `syz.4.2795'. [ 457.677581][T16356] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 457.836671][T16362] lo speed is unknown, defaulting to 1000 [ 457.873091][T16362] lo speed is unknown, defaulting to 1000 [ 457.937142][T16367] netlink: 'syz.1.2799': attribute type 1 has an invalid length. [ 457.973591][T16369] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2800'. [ 458.015332][T16370] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2798'. [ 458.054416][T16377] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2802'. [ 458.078215][T16375] sit0: entered promiscuous mode [ 458.086817][T16378] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2802'. [ 458.121155][T16375] netlink: 'syz.4.2801': attribute type 1 has an invalid length. [ 458.169365][T16375] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2801'. [ 458.925779][T16410] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2810'. [ 458.965878][T16410] pim6reg1: entered promiscuous mode [ 458.982090][T16410] pim6reg1: entered allmulticast mode [ 459.069272][T16414] tap0: tun_chr_ioctl cmd 1074025677 [ 459.075361][T16414] tap0: linktype set to 768 [ 459.169805][T16416] ax25_connect(): syz.3.2811 uses autobind, please contact jreuter@yaina.de [ 459.292070][T16415] ------------[ cut here ]------------ [ 459.298036][T16415] refcount_t: decrement hit 0; leaking memory. [ 459.318020][T16422] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2812'. [ 459.327078][T16415] WARNING: CPU: 1 PID: 16415 at lib/refcount.c:31 refcount_warn_saturate+0xfa/0x1d0 [ 459.327153][T16415] Modules linked in: [ 459.327174][T16415] CPU: 1 UID: 0 PID: 16415 Comm: syz.3.2811 Not tainted 6.14.0-rc7-syzkaller-01962-ga19f40d919ca #0 [ 459.327198][T16415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 459.327213][T16415] RIP: 0010:refcount_warn_saturate+0xfa/0x1d0 [ 459.327245][T16415] Code: b2 00 00 00 e8 d7 2e cc fc 5b 5d c3 cc cc cc cc e8 cb 2e cc fc c6 05 78 83 31 0b 01 90 48 c7 c7 80 b5 80 8c e8 87 e9 8b fc 90 <0f> 0b 90 90 eb d9 e8 ab 2e cc fc c6 05 55 83 31 0b 01 90 48 c7 c7 [ 459.327264][T16415] RSP: 0018:ffffc9001b54fb68 EFLAGS: 00010246 [ 459.327286][T16415] RAX: 149510064a7afe00 RBX: ffff88807b52064c RCX: ffff888042fd0000 [ 459.327304][T16415] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 459.327319][T16415] RBP: 0000000000000004 R08: ffffffff8181ae52 R09: fffffbfff1d3a69c [ 459.327336][T16415] R10: dffffc0000000000 R11: fffffbfff1d3a69c R12: ffff88807b520608 [ 459.327355][T16415] R13: 0000000000000000 R14: ffff88807b52064c R15: dffffc0000000000 [ 459.327372][T16415] FS: 000055556b228500(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 459.327392][T16415] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 459.327408][T16415] CR2: 00007f101b983f98 CR3: 0000000081eb2000 CR4: 00000000003526f0 [ 459.327428][T16415] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 459.421963][T16418] lo speed is unknown, defaulting to 1000 [ 459.428656][T16415] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 459.438334][T16418] lo speed is unknown, defaulting to 1000 [ 459.445891][T16415] Call Trace: [ 459.494444][T16415] [ 459.497414][T16415] ? __warn+0x165/0x4d0 [ 459.501787][T16415] ? refcount_warn_saturate+0xfa/0x1d0 [ 459.507533][T16415] ? report_bug+0x2b3/0x500 [ 459.512140][T16415] ? refcount_warn_saturate+0xfa/0x1d0 [ 459.517655][T16415] ? handle_bug+0x60/0x90 [ 459.522066][T16415] ? exc_invalid_op+0x1a/0x50 [ 459.526786][T16415] ? asm_exc_invalid_op+0x1a/0x20 [ 459.531961][T16415] ? __warn_printk+0x292/0x360 [ 459.536768][T16415] ? refcount_warn_saturate+0xfa/0x1d0 [ 459.542741][T16415] ? refcount_warn_saturate+0xf9/0x1d0 [ 459.548253][T16415] ref_tracker_free+0x6af/0x7e0 [ 459.553469][T16415] ? __pfx_ref_tracker_free+0x10/0x10 [ 459.558891][T16415] ? ax25_destroy_socket+0x551/0x5c0 [ 459.564320][T16415] ax25_release+0x368/0x960 [ 459.569293][T16415] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 459.574981][T16415] sock_close+0xbc/0x240 [ 459.579288][T16415] ? __pfx_sock_close+0x10/0x10 [ 459.584729][T16415] __fput+0x3e9/0x9f0 [ 459.588787][T16415] task_work_run+0x24f/0x310 [ 459.593473][T16415] ? _raw_spin_unlock+0x28/0x50 [ 459.598383][T16415] ? __pfx_task_work_run+0x10/0x10 [ 459.603613][T16415] ? syscall_exit_to_user_mode+0xa3/0x340 [ 459.609612][T16415] syscall_exit_to_user_mode+0x13f/0x340 [ 459.615406][T16415] do_syscall_64+0x100/0x230 [ 459.620061][T16415] ? clear_bhb_loop+0x35/0x90 [ 459.624868][T16415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.630826][T16415] RIP: 0033:0x7feda8b8d169 [ 459.635324][T16415] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 459.655054][T16415] RSP: 002b:00007ffd706836e8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 459.663613][T16415] RAX: 0000000000000000 RBX: 00007feda8da7ba0 RCX: 00007feda8b8d169 [ 459.671776][T16415] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 459.679789][T16415] RBP: 00007feda8da7ba0 R08: 00000000000000a4 R09: 00000004706839df [ 459.687866][T16415] R10: 00000000003ffd38 R11: 0000000000000246 R12: 00000000000704a2 [ 459.695934][T16415] R13: 00007ffd706837e0 R14: ffffffffffffffff R15: 00007ffd70683800 [ 459.704018][T16415] [ 459.707075][T16415] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 459.714370][T16415] CPU: 1 UID: 0 PID: 16415 Comm: syz.3.2811 Not tainted 6.14.0-rc7-syzkaller-01962-ga19f40d919ca #0 [ 459.725155][T16415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 459.735217][T16415] Call Trace: [ 459.738499][T16415] [ 459.741434][T16415] dump_stack_lvl+0x241/0x360 [ 459.746210][T16415] ? __pfx_dump_stack_lvl+0x10/0x10 [ 459.751416][T16415] ? __pfx__printk+0x10/0x10 [ 459.756007][T16415] ? _printk+0xd5/0x120 [ 459.760167][T16415] ? __init_begin+0x41000/0x41000 [ 459.765208][T16415] ? vscnprintf+0x5d/0x90 [ 459.769549][T16415] panic+0x349/0x880 [ 459.773449][T16415] ? __warn+0x174/0x4d0 [ 459.777607][T16415] ? __pfx_panic+0x10/0x10 [ 459.782041][T16415] __warn+0x344/0x4d0 [ 459.786109][T16415] ? refcount_warn_saturate+0xfa/0x1d0 [ 459.791573][T16415] report_bug+0x2b3/0x500 [ 459.795925][T16415] ? refcount_warn_saturate+0xfa/0x1d0 [ 459.801415][T16415] handle_bug+0x60/0x90 [ 459.805574][T16415] exc_invalid_op+0x1a/0x50 [ 459.810078][T16415] asm_exc_invalid_op+0x1a/0x20 [ 459.814942][T16415] RIP: 0010:refcount_warn_saturate+0xfa/0x1d0 [ 459.821021][T16415] Code: b2 00 00 00 e8 d7 2e cc fc 5b 5d c3 cc cc cc cc e8 cb 2e cc fc c6 05 78 83 31 0b 01 90 48 c7 c7 80 b5 80 8c e8 87 e9 8b fc 90 <0f> 0b 90 90 eb d9 e8 ab 2e cc fc c6 05 55 83 31 0b 01 90 48 c7 c7 [ 459.840631][T16415] RSP: 0018:ffffc9001b54fb68 EFLAGS: 00010246 [ 459.846725][T16415] RAX: 149510064a7afe00 RBX: ffff88807b52064c RCX: ffff888042fd0000 [ 459.854707][T16415] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 459.862685][T16415] RBP: 0000000000000004 R08: ffffffff8181ae52 R09: fffffbfff1d3a69c [ 459.870658][T16415] R10: dffffc0000000000 R11: fffffbfff1d3a69c R12: ffff88807b520608 [ 459.878637][T16415] R13: 0000000000000000 R14: ffff88807b52064c R15: dffffc0000000000 [ 459.886653][T16415] ? __warn_printk+0x292/0x360 [ 459.891446][T16415] ? refcount_warn_saturate+0xf9/0x1d0 [ 459.896930][T16415] ref_tracker_free+0x6af/0x7e0 [ 459.901799][T16415] ? __pfx_ref_tracker_free+0x10/0x10 [ 459.907191][T16415] ? ax25_destroy_socket+0x551/0x5c0 [ 459.912492][T16415] ax25_release+0x368/0x960 [ 459.917012][T16415] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 459.922415][T16415] sock_close+0xbc/0x240 [ 459.926689][T16415] ? __pfx_sock_close+0x10/0x10 [ 459.931564][T16415] __fput+0x3e9/0x9f0 [ 459.935599][T16415] task_work_run+0x24f/0x310 [ 459.940201][T16415] ? _raw_spin_unlock+0x28/0x50 [ 459.945070][T16415] ? __pfx_task_work_run+0x10/0x10 [ 459.950196][T16415] ? syscall_exit_to_user_mode+0xa3/0x340 [ 459.955937][T16415] syscall_exit_to_user_mode+0x13f/0x340 [ 459.961590][T16415] do_syscall_64+0x100/0x230 [ 459.966193][T16415] ? clear_bhb_loop+0x35/0x90 [ 459.970891][T16415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.976815][T16415] RIP: 0033:0x7feda8b8d169 [ 459.981495][T16415] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 460.001107][T16415] RSP: 002b:00007ffd706836e8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 460.009527][T16415] RAX: 0000000000000000 RBX: 00007feda8da7ba0 RCX: 00007feda8b8d169 [ 460.017502][T16415] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 460.025480][T16415] RBP: 00007feda8da7ba0 R08: 00000000000000a4 R09: 00000004706839df [ 460.033452][T16415] R10: 00000000003ffd38 R11: 0000000000000246 R12: 00000000000704a2 [ 460.041425][T16415] R13: 00007ffd706837e0 R14: ffffffffffffffff R15: 00007ffd70683800 [ 460.049414][T16415] [ 460.052781][T16415] Kernel Offset: disabled [ 460.057153][T16415] Rebooting in 86400 seconds..