last executing test programs: 5.000839096s ago: executing program 0 (id=1600): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200440e5}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$OBJ_GET_PROG(0x9, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xcb, &(0x7f0000000080)={0x1, 0x1, 0x0, r2, 0xce6}, 0xc) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfe, 0x2ffffffff}, 0xfffffffffffffd03) unshare(0x20000400) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r6, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e22, 0x80000, @dev={0xfe, 0x80, '\x00', 0x19}, 0xfffffffd}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="12000000000000002900008607096bb4d6f4c00000000000180000000000000029000000370000003a4c"], 0x30}, 0xc4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, r4, 0x0, 0x3, &(0x7f00000000c0)='+%\x00', 0x0}, 0x30) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvmmsg(r8, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}, 0x6e1}], 0x1, 0x20, 0x0) setsockopt$sock_int(r8, 0x1, 0x28, &(0x7f0000000000)=0x3, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000280)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r7}, 0x4) ioctl$FICLONE(r5, 0x40049409, 0xffffffffffffffff) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) 4.06386272s ago: executing program 0 (id=1616): r0 = socket$kcm(0x2d, 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'fpu(lrw(cbc-aes-ce))\x00'}, 0x58) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000340)={r0}) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x14}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0xa, 0x7, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@ldst={0x3, 0x0, 0x0, 0x1, 0x0, 0x31}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_val={0x18, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0xb}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r2, 0x10e, 0x3, &(0x7f0000000140)=""/88, &(0x7f0000000080)=0x58) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0xe, &(0x7f0000002e40)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r3) write$cgroup_devices(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="63202a3ad68852099e"], 0x9) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r4, 0x890b, 0x0) pipe(&(0x7f0000000380)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)=@ipv4_delroute={0x1c, 0x19, 0x1, 0x70bd27, 0x25dfdbfb, {0x2, 0x14, 0x0, 0x9, 0xfc, 0x3, 0x0, 0x4, 0x2000}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="50000000090601020000000000000000030000000900020073797a31000000000500010007000000280007800c00018008000140e00000010c00148008000140ac1414bb0c00028008000140"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socket$qrtr(0x2a, 0x2, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$BTRFS_IOC_START_SYNC(r7, 0x80089418, &(0x7f0000000180)=0x0) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000200)=[{0x8, 0x4, 0x2, 0x8}, {0x2d, 0x0, 0x0, 0x7ffff021}, {0x6, 0xfe}]}, 0x10) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r8, 0xc0c89425, &(0x7f00000003c0)={"8852d11a8410cb967c91692395da9685", 0x0, r9, {0x7, 0xffffffff}, {0xfffffffffffff7f7, 0x2}, 0x3, [0x5c, 0x1, 0x4, 0x0, 0xa5, 0x5, 0x0, 0x1, 0x300, 0x7fff, 0xffffffff00000000, 0xfffffffffffffffc, 0x1, 0x400, 0x2, 0x4]}) ioctl$BTRFS_IOC_START_SYNC(r5, 0x80089418, &(0x7f00000001c0)) 2.243118469s ago: executing program 2 (id=1634): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000740)=ANY=[@ANYBLOB="fc000000190001002dbd7000000000000000001e000000000000000000000001fe8000000000000000000000000000bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000009a5ab6e10c00000000000000040000000000000000000000000000000000000000000000ffffffffffffffff000000000020000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008000000000000000001000000000000004400050000000000000000000000000000000000000000003c00000002000000ffffffff00020000000000000000000006000000040100000000afe274d9da000000000000000000004c8a"], 0xfc}}, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r1, 0x0, 0xd, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xfffffff6, 0xc03, 0x1ff, 0x3, 0x7, 0x6, 0x0, 0x4, 0x7}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001640)=@deltfilter={0x24, 0x2d, 0x1, 0x70bd2c, 0x25dfdbf7, {0x0, 0x0, 0x0, r5, {0xb, 0x19}, {0x3, 0xfff1}, {0xe, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="0200"/18], 0x50) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="180800000004d318bd940000000000002bf30000000000000a21c2267fba8c52bc056d86488538fa1b3ee1b935cce07c367a"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r7, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x10, &(0x7f0000001380)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000540)={'ip6gre0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) r10 = accept4$packet(r9, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14, 0x80800) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x34) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r11, @ANYBLOB="0100f27e0920b2880000000000001c001700c6efa10000010000006e64000000000c00020008f5010006"], 0x3c}}, 0x11) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800b00010067656e657665000020000280140007000000000000000000000000000000000105000c000100000008000a00", @ANYRES32=r11], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2.047926413s ago: executing program 2 (id=1635): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x2a, 0x2, 0x1000) r1 = socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"/454], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd74}, 0x48) sendmsg$key(r1, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000280)={&(0x7f00000027c0)=ANY=[@ANYBLOB="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"], 0x60}, 0x1, 0x7}, 0x0) syz_emit_ethernet(0xfffffc69, &(0x7f0000000540)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaa2402544aadcccaba772be1cd1e6d43aa0308060000003c0000000003019078ac1e0001ac1e010144140a01ac1414f1cd8f7e620bb29b68cf5e1bf8bc5d0000000000e0000002000000000d00907800"/103], 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000005480)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000000206010300050000000000000000000005000100070000000900020073797a3100000036056b9b2ab75d9100"], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000003c000701fcffffff00000000017c0000100036800c00020008000000007000000c000180"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x22}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="312000000000000014002b8008000100", @ANYRES32=r3, @ANYBLOB="080003000200000008001b0000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="6eb03e6570e489c5", 0x8}], 0x1}}], 0x1, 0x2000c000) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f00000000c0)=0x41) pwritev(r5, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd02000040", 0x42}], 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="37d92ffcb92554620ac47b7e09918d211b54c0db44330d2d0dc500c456e457182fe5f1e564ff9e775b3a12daa61fe365b7068433a33012cbaf5e0de58c54f63fccf28bbce8bd51b9535164ffede7446f301d9900be35198d291bb1c076a50e0580cd3929e774a65e1bb316a2b98eae0676324c887a2f5b94dd5222271a60a312a7c6a581adae683a0c62eebb2505919f36bf6556482fc94f9048f03f7ffffba33740861a543c131a2c54c01f261434d0e6858869cbb748cdcf6ce05eefd6cb5972eee4980debc506638e6303ef1a32cc281b74be25c800dd6ae66790e87280b43919235a14dd5c886559"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r6 = socket(0xf, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x40000, 0x0, 0x2, 0x1}}) socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_rxfh_indir={0x39, 0x1, [0x1]}}) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r7, 0x84, 0x73, &(0x7f0000000480)={0x0, 0x9303, 0x30, 0x7, 0x4}, &(0x7f0000000500)=0x18) socket$kcm(0xf, 0x0, 0x2) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0x9, 0x4, 0x7, 0x4ae, 0x1, 0xf, 0x4, 0x6, 0xff, 0x7f, 0x7fffffffffffffff, 0xffffffffffff8001, 0x5}}) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x3fa1dc947ffe4b82}) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x1d6, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], 0x0) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000019c0)=ANY=[@ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4800) 2.046136457s ago: executing program 1 (id=1645): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0xfffffffffffffe77}, 0x1, 0x0, 0x0, 0x8800}, 0x4000885) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000600)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x83000000}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) bind$netlink(r7, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r7, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r6, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r10, 0x5452, &(0x7f0000000300)=0x80000000) listen(r10, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r11, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r10}, 0x20) recvmmsg(r10, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)=""/52, 0x34}], 0x1}, 0xe}], 0x2, 0x0, 0x0) shutdown(r10, 0x1) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x44800) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x70bd2b, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 1.669171138s ago: executing program 0 (id=1638): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000fddbdf250500000008000600", @ANYRES32=r1, @ANYBLOB="08002c0001000000080039000700000008000300", @ANYRES32=r4], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x40040) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00fc27bd7000ffdbdf25a5233833f49e466015594a000c00000008003a0000000100080900000008000008002c00"], 0x34}, 0x1, 0x0, 0x0, 0x4010}, 0x40) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udplite(0x2, 0x2, 0x88) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="16000000000000000000df9d2001e17f00"/26, @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x14, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000004000000000000000300000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000020085000000700000009500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0xfca804a0, 0x10, 0x10, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r9 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_inet6_SIOCADDRT(r9, 0x890b, &(0x7f0000000340)={@dev={0xfe, 0x80, '\x00', 0x40}, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, 0x3, 0x2, 0x5, 0x500, 0xb7, 0xc20022}) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) 1.541737123s ago: executing program 1 (id=1639): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800"/15], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x800) recvmsg$qrtr(r2, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x38, 0x2) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000340)) close(r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x16b480, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xc, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x10000, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xfffffdb6, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00|\x00'], 0xa4}}, 0x4000) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="50000000090601020000000000000000030000000900020073797a31000000000500010007000000280007800c00018008000140e00000010c00148008000140ac1414bb0c00028008000140"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b0000000000"], 0x48) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454c9, 0x1) 1.455705482s ago: executing program 4 (id=1640): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000200)={0x2c, r1, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xa}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0xc88c0) r3 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x800) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000000180), &(0x7f00000001c0)=0x4) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) splice(r4, &(0x7f0000000040), r5, 0x0, 0x800000000ff, 0x5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r8 = socket(0x2a, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r10, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r11, 0x10681, 0x20000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x20044002) r12 = socket(0x10, 0x803, 0x0) r13 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000001400b59525bd7000fbdbdf250a400000", @ANYRES32=r14, @ANYBLOB="14000200000000000000000000003f560000000014000100fe800000000000000000000000000035"], 0x40}}, 0x0) r15 = socket(0x10, 0x803, 0x0) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r15, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r16}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x195}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000011}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, 0x0, 0x100, 0x9, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x24}, @void, @val={0xc, 0x99, {0xfffffff3, 0x6c}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4801}, 0x80) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x74, r7, 0x5, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r17}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "4d8e0304fd1392da3b4e895ae47174d315f17ab89d99808e"}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}]]}, 0x74}, 0x1, 0x0, 0x0, 0x40048}, 0x0) 1.451980556s ago: executing program 0 (id=1641): pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000001c0)=[{&(0x7f00000004c0)="3b256c0600ff6a89d5cfc3ce7467bd24000000002872bca49f991feb1ba0c1a9b3534660a00d0453e1e9eaef", 0x2c}], 0x1, 0x2) (async) r2 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) (async) setsockopt$inet_int(r2, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x11c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x48, 0x2, {{0xa, [0xb, 0x2, 0xb, 0x8c, 0xf, 0x4, 0x4, 0x6, 0xa, 0xf, 0x10, 0x2, 0xd, 0x8, 0x5, 0xc], 0x1, [0x9, 0x67ef, 0x2, 0x4, 0x4, 0x8, 0x3, 0xfff9, 0x9, 0xd4e8, 0x6, 0x200, 0x10, 0x0, 0xc73, 0x5], [0x800, 0x1, 0x7, 0x3d3e, 0xff, 0x4, 0x2, 0x50ad, 0x81, 0xc5, 0x8002, 0x3, 0x2, 0x7, 0x8, 0xce]}, [@TCA_MQPRIO_MAX_RATE64={0x70}, @TCA_MQPRIO_SHAPER={0x6}, @TCA_MQPRIO_MIN_RATE64={0x1c, 0x3, 0x0, 0x1, [{0xc, 0x3, 0x9}, {0xc, 0x3, 0x8000}]}, @TCA_MQPRIO_MIN_RATE64={0x0, 0x3, 0x0, 0x1, [{0x0, 0x3, 0x6}, {0x0, 0x3, 0x9}, {0x0, 0x3, 0x4160}, {0x0, 0x3, 0x8000000000000000}, {0x0, 0x3, 0x8}, {0x0, 0x3, 0x80000000}, {0x0, 0x3, 0x8}, {0x0, 0x3, 0xb7a}, {0x0, 0x3, 0x7}, {}, {0x0, 0x3, 0x9}, {0x0, 0x3, 0x3}]}]}}}]}, 0x11c}}, 0x0) (async) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) (async) splice(r0, 0x0, r2, 0x0, 0x8000, 0x0) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) (async) setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48, 0x83, 0x0, 0x80000001}, {0x6, 0x5, 0x0, 0xfffffc}]}, 0x10) (async) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) (async) syz_emit_ethernet(0x66, &(0x7f0000000440)={@broadcast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{}, 0xfffff788}}}}}}}, 0x0) r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f00000002c0)={'rose0\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f0000000300)={'rose0\x00', 0x4000}) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x26}, 0x28) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r11 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r10, &(0x7f0000001840)=ANY=[@ANYBLOB="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"], 0xfce) write$tun(r6, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0xfdef) 1.43072143s ago: executing program 1 (id=1642): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x20, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x8, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x20, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x8, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=@newtfilter={0x30, 0x2c, 0xd2b, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xffe0}, {}, {0xe, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x893}, 0x24040084) (async) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=@newtfilter={0x30, 0x2c, 0xd2b, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xffe0}, {}, {0xe, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x893}, 0x24040084) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x4) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x4) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000240)={@remote, r3}, 0x14) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004260000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 1.403488559s ago: executing program 2 (id=1644): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt(r2, 0xc, 0x7, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='signal_generate\x00', r1}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x44, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x6db6ec49e3ab5510}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1cc09}]}}]}, 0x44}}, 0x400c084) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0), 0x0) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0xffffffffffffffb0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000002b0009ef"], 0x14}}, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0) (async) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r8 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x80, 0x3, 0x18, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @dev={0xfe, 0x80, '\x00', 0x13}, 0x1, 0x80, 0xfffffffe, 0x80}}) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000f40)=[{{&(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000640), 0x0, &(0x7f00000006c0)=""/162, 0xa2}, 0xd}], 0x1, 0x10000, 0x0) 1.279960771s ago: executing program 4 (id=1646): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000740)=ANY=[@ANYBLOB="fc000000190001002dbd7000000000000000001e000000000000000000000001fe8000000000000000000000000000bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="000000009a5ab6e10c00000000000000040000000000000000000000000000000000000000000000ffffffffffffffff000000000020000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008000000000000000001000000000000004400050000000000000000000000000000000000000000003c00000002000000ffffffff00020000000000000000000006000000040100000000afe274d9da000000000000000000004c8a"], 0xfc}}, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r1, 0x0, 0xd, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xfffffff6, 0xc03, 0x1ff, 0x3, 0x7, 0x6, 0x0, 0x4, 0x7}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001640)=@deltfilter={0x24, 0x2d, 0x1, 0x70bd2c, 0x25dfdbf7, {0x0, 0x0, 0x0, r5, {0xb, 0x19}, {0x3, 0xfff1}, {0xe, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="0200"/18], 0x50) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="180800000004d318bd940000000000002bf30000000000000a21c2267fba8c52bc056d86488538fa1b3ee1b935cce07c367a"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r7, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x10, &(0x7f0000001380)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000540)={'ip6gre0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) r10 = accept4$packet(r9, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14, 0x80800) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x34) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r11, @ANYBLOB="0100f27e0920b2880000000000001c001700c6efa10000010000006e64000000000c00020008f5010006"], 0x3c}}, 0x11) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800b00010067656e657665000020000280140007000000000000000000000000000000000105000c000100000008000a00", @ANYRES32=r11], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.153162984s ago: executing program 1 (id=1647): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@newtfilter={0x888, 0x2c, 0xd2f, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {}, {0x2}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x2}}, @filter_kind_options=@f_fw={{0x7}, {0x854, 0x2, [@TCA_FW_POLICE={0x850, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x6, 0x3ff, 0x5, 0xfffffffd, {0x8, 0x1, 0x2, 0xf801, 0xa6d, 0x12b}, {0x5, 0x0, 0x4, 0x3701, 0xcc42, 0x7}, 0x0, 0x2, 0x6}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x401, 0xe, 0x80000001, 0x8, 0x200, 0x6, 0x8, 0x4, 0x10200000, 0x4, 0x3, 0x9, 0x3, 0xffffffff, 0xb, 0x9, 0x4, 0xd4ae, 0x5, 0x300000, 0xe1b5, 0xc5b, 0x6, 0x4, 0x9, 0x6, 0x9, 0x8, 0x3, 0x9, 0xd, 0x7f, 0x7, 0xce0, 0x1ff, 0x6, 0x6, 0x41, 0xff, 0x800, 0xfff, 0x7, 0x9, 0xd, 0x4, 0xffffff1f, 0xa, 0xc, 0x8, 0xfffffffa, 0x155, 0x7, 0x0, 0x18000, 0xc, 0x9, 0x40000, 0x101, 0x6, 0x3ff, 0x1, 0x3, 0x7554, 0x2, 0x4, 0x1, 0x4, 0xd, 0x8000, 0xff, 0x0, 0xeac2, 0x87, 0x3, 0xfe000000, 0x3, 0x8001, 0xff, 0xffff1cac, 0x2892, 0x6, 0x8c5e, 0x1, 0x5, 0xffffffff, 0x80, 0xffffffac, 0x3, 0xff1, 0x2, 0x2, 0x8, 0x2, 0x1, 0x8, 0x8, 0xfff, 0x80000001, 0x9, 0x8, 0x0, 0x8, 0x487, 0x6, 0x8, 0x1000, 0x1ff800, 0x6, 0xfffffffe, 0x3c78, 0xfa1, 0x3, 0x6, 0x9, 0xffffffff, 0x80000002, 0x2, 0xda, 0x9, 0x401, 0x6, 0x7, 0x2, 0x2, 0xe, 0x835, 0x4, 0x3, 0x6cc7, 0x6, 0x8, 0x8, 0x400, 0x8, 0x4, 0x3, 0x5, 0x5, 0x0, 0x9, 0x400, 0x3, 0x0, 0x4cc, 0xb, 0x0, 0xce, 0x6, 0x0, 0xc8, 0x4, 0x5, 0x4, 0x1ff, 0x1ff, 0x968, 0x5, 0x68cff086, 0x2, 0xfff, 0x2, 0x7ff, 0x1000, 0x80000001, 0x9, 0x9, 0x0, 0x8001, 0x1000, 0x8b7f, 0xfe, 0xc, 0x8, 0x7, 0x8000000, 0x0, 0x7fff, 0xfffffffd, 0x5, 0x815d, 0x5, 0x44, 0x4, 0x6, 0x3, 0x1, 0x8, 0x0, 0x7ff, 0x3, 0x8, 0x1, 0x2, 0x800, 0x7, 0x5, 0x10, 0xfffffff7, 0x8, 0x40, 0x1, 0x10001, 0x1000, 0xe42c, 0x1, 0x101, 0x6, 0x8, 0x4, 0x9a14, 0x4, 0x81, 0x7, 0x0, 0x8, 0x8, 0xfffffffa, 0x0, 0x30000, 0x7ff, 0x4, 0x3, 0xd, 0x5, 0x0, 0xfff, 0x3, 0x7b0, 0x7, 0x9, 0xffff, 0x5, 0xff, 0x4, 0x0, 0x4, 0x9, 0x6, 0x100, 0x81, 0x0, 0x7fc, 0x2, 0x5, 0x80, 0x2, 0xe, 0x1, 0x40, 0x1ff, 0x3, 0x380, 0x6, 0x7, 0x8, 0xfffffffb]}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x7, 0x8, 0x7, 0xffff, 0x2, 0x3, 0x7fff, 0x8, 0x0, 0x401, 0x4, 0x0, 0xf7b1, 0xa, 0x40, 0x200, 0x0, 0x1, 0x9, 0x9, 0x8, 0xbf2, 0x2, 0xffff9374, 0x9, 0x1, 0x5, 0x3ff, 0x3, 0x6, 0x5, 0x2, 0x7, 0xe, 0x5, 0x4, 0x9, 0x8, 0xf0, 0x5, 0x8000, 0x0, 0x7, 0xff, 0x2, 0x2, 0x400, 0x0, 0x5, 0x2, 0x401, 0x100, 0xf30, 0x8001, 0x9, 0x370, 0x3, 0x1, 0xfffffff9, 0x9, 0x3, 0x5, 0xb9b, 0x1, 0x5, 0x0, 0x4, 0x7, 0x6, 0x3ff, 0x3, 0x7, 0x76, 0x9, 0xffff, 0x8, 0xd, 0x80, 0x4, 0x9, 0x7ff, 0x80000001, 0x9, 0x6, 0x7f, 0x9, 0x7ff, 0x3, 0x8, 0x31, 0x1, 0x2d, 0x0, 0xf02, 0x15200, 0xa, 0x1, 0xe148, 0x7, 0x1, 0x3, 0x6, 0x6, 0xb, 0xfffffffa, 0x4, 0xdf, 0x80000000, 0x8001, 0x2, 0x3, 0x2971010e, 0x3b655406, 0x1, 0x8, 0x6, 0x6, 0x4, 0x4, 0x8, 0x80000001, 0x5dd, 0x2d3, 0x7, 0x8, 0x5, 0x79d5, 0x2, 0x800, 0x8d, 0x1, 0x2, 0x1, 0x5, 0x6, 0x338, 0x6, 0x2, 0x4, 0x1, 0x3, 0x0, 0x0, 0x8, 0x1, 0x3ff, 0x8, 0x56, 0x7, 0x401, 0x7, 0x0, 0x0, 0x0, 0xda, 0x5, 0x42, 0x18, 0xfffffff7, 0x5, 0xed2, 0x7, 0x211, 0x0, 0x2, 0xc9, 0x3, 0x8, 0x1, 0x9, 0x58, 0x8, 0x5e5, 0x5, 0x3, 0xfffffffb, 0x3, 0xff, 0x6, 0x10, 0xf7ee907a, 0xff, 0xc9, 0x9, 0x0, 0x400, 0x0, 0x7, 0x6, 0x9, 0x8, 0x8, 0x0, 0x0, 0x7, 0x0, 0x4, 0x7, 0x2, 0x3, 0x9, 0x9, 0x0, 0x7, 0x4, 0x0, 0x4, 0x4, 0x4, 0x6f3, 0x6, 0x10, 0x0, 0x7, 0xfffffff9, 0xfffffffa, 0x9, 0x53a, 0x8, 0x1, 0x4, 0xb, 0x8, 0xfffffff9, 0x400, 0x461, 0x81, 0x8, 0x2, 0x7ff, 0x2, 0x8000, 0x7, 0x4, 0xba95, 0x4, 0x4706, 0x7ff, 0x4, 0xffffffff, 0xf7b1, 0x3, 0x2, 0x5, 0x9, 0x1fffc, 0x80000000, 0x8001, 0x9, 0x4, 0x9, 0x3, 0x6, 0xce, 0x8]}]}]}}]}, 0x888}, 0x1, 0x0, 0x0, 0x20000005}, 0x40) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000040)={0x2, 0x4, 0x7fffffff}, 0xc) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@alu={0x7, 0x0, 0x3, 0x0, 0x0, 0x1, 0x4}]}, &(0x7f00000005c0)='syzkaller\x00', 0x2}, 0x90) (rerun: 32) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(r4, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r5, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x3}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x48c0) 1.152482783s ago: executing program 0 (id=1648): r0 = socket$inet6(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x5, 0x8, 0x9}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r1, &(0x7f0000000240), &(0x7f00000000c0)=@udp6=r0}, 0x20) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0107000000000000000067"], 0x28}, 0x1, 0x0, 0x0, 0x44844}, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000000)={0x1f}, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x8100, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r6) sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r7, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 1.049970137s ago: executing program 2 (id=1649): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x2, 0x1, 0xa0}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000030400000000fddbdf2500007400", @ANYRES32=0x0, @ANYBLOB="0008007e928457563aa5981ebc386dcaad583a0087520100200012800b0001006272696467650000100002800c002e000000000001000000"], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x0) 899.904822ms ago: executing program 3 (id=1650): r0 = socket$kcm(0x2d, 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000340)={r0}) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xc, 0xe, &(0x7f0000002e40)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, 0x0) r4 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x1c, r4, 0x1, 0x70bd29, 0x25dfdbff, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @loopback}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x404) sendmsg$FOU_CMD_DEL(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x30, r4, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x40}}}]}, 0x30}}, 0x4044000) pipe(&(0x7f0000000380)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="50000000090601020000000000000000030000000900020073797a31000000000500010007000000280007800c00018008000140e00000010c00148008000140ac1414bb0c00028008000140"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) 888.91467ms ago: executing program 2 (id=1651): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELTABLE={0xcc, 0x2, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0x83, 0x6, "4d59c56b06ad98233303369d302fb0fc660b96f60fb108701f9ba36dd8932868850d4534a56464d13745325bdf6c9688be20ed545f51610a397764bcd7d2f1c9a427367d7374490178683b8faec2c275d1cd682ad04cccac15ec005ef89426caf940c04b0baa632bdd60b3c06e4ea59d20cf9e3d709da07f94722e6fc4dde0"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x1ac, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}]}, @NFTA_RULE_EXPRESSIONS={0x168, 0x4, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_DUP_SREG_DEV={0x8}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}, {0x5c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0xf}]}}}, {0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}, {0x18, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}]}}}, {0x44, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_META_KEY={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x11}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x18}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xb}]}}}, {0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x2cc}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001500)={0x34, r4, 0x1, 0x4000, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0xa000000}]}, 0x34}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getpeername$netrom(r6, 0x0, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x2c, r2, 0x1, 0x0, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x4}]}]}]}, 0x2c}}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000300)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)={0x1c, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0x1c}, 0x1, 0x0, 0x0, 0x804}, 0x40084) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="a8010000", @ANYRES16=r7, @ANYBLOB="0b002bbd7000fcdbdf2567000000080001000a00000008000300", @ANYRES32=r8, @ANYBLOB="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"], 0x1a8}}, 0x4000800) 835.882602ms ago: executing program 3 (id=1652): r0 = socket$rds(0x15, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="180000005500010000000000000000000700580cb01a83d0611b3f0000", @ANYRES32=r1], 0x18}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a18010000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000002cd40009800800014000000006c80002800c000180080001400000000324"], 0x140}}, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) mmap(&(0x7f0000609000/0x4000)=nil, 0x4000, 0x0, 0x11, r2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x17, &(0x7f0000000080)=0x1, 0x4) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000d00)=@o_path={&(0x7f0000000cc0)='./file0\x00', 0x0, 0x4010, r0}, 0x18) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f00000000c0)) ioctl$int_in(r1, 0x5421, &(0x7f0000000300)=0x10001) sendmsg$rds(r0, &(0x7f0000000580)={&(0x7f00000005c0)={0x2, 0x4, @local}, 0x10, 0x0, 0x0, &(0x7f0000003a80)=[@rdma_args={0x48, 0x114, 0x1, {{0x0, 0x2}, {0x0}, &(0x7f0000003a00)=[{&(0x7f00000016c0)=""/96, 0x60}, {&(0x7f0000001740)=""/4096, 0x1000}], 0x2, 0x39, 0x2}}], 0x48, 0x4000000}, 0x0) recvmmsg(r2, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)=""/160, 0xa0}, {&(0x7f0000000100)=""/180, 0xb4}, {&(0x7f00000001c0)=""/71, 0x47}, {&(0x7f0000002740)=""/4096, 0x1000}], 0x4}, 0x1000}, {{&(0x7f0000000280)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000300)}, {&(0x7f0000000340)=""/17, 0x11}, {&(0x7f0000000380)=""/15, 0xf}, {&(0x7f00000003c0)=""/181, 0xb5}], 0x4, &(0x7f00000004c0)}, 0x831}, {{&(0x7f0000000500)=@qipcrtr, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000600)=""/156, 0x9c}, {&(0x7f00000006c0)=""/180, 0xb4}, {&(0x7f0000000880)=""/228, 0xe4}, {&(0x7f0000000780)=""/55, 0x37}], 0x4, &(0x7f0000000980)=""/103, 0x67}, 0x401}, {{&(0x7f0000000a00)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000a80)=""/75, 0x4b}], 0x1, &(0x7f0000000b00)=""/65, 0x41}, 0x9c4}], 0x4, 0x120, &(0x7f0000000c80)) 757.219951ms ago: executing program 4 (id=1653): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800"/15], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x800) recvmsg$qrtr(r2, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x38, 0x2) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000340)) close(r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x16b480, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xc, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x10000, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xfffffdb6, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00|\x00'], 0xa4}}, 0x4000) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="50000000090601020000000000000000030000000900020073797a31000000000500010007000000280007800c00018008000140e00000010c00148008000140ac1414bb0c00028008000140"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b0000000000"], 0x48) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454c9, 0x1) 733.357592ms ago: executing program 1 (id=1654): connect$qrtr(0xffffffffffffffff, &(0x7f0000000040)={0x2a, 0x1}, 0xc) (async) r0 = socket$qrtr(0x2a, 0x2, 0x0) (async) r1 = socket(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) r2 = gettid() (async, rerun: 32) socket(0x10, 0x803, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f00000000c0), 0x10) (async) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES16=r3], 0x448}}, 0x0) (async, rerun: 64) sendmmsg$inet(r3, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0) (rerun: 64) sendmmsg$unix(r1, &(0x7f0000000940)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40080}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@cred={{0x1c, 0x1, 0x2, {r2}}}, @rights={{0x18, 0x1, 0x1, [r1, 0xffffffffffffffff]}}], 0x38, 0x2004c0c4}}], 0x2, 0x0) (async) connect$qrtr(r1, &(0x7f00000000c0)={0x2a, 0x4, 0x1}, 0xc) (async) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000080)="fb", 0x1}], 0x1) (async) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r4, 0x84, 0x15, &(0x7f0000000000), 0x1) ioctl$sock_qrtr_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000480)) 647.699631ms ago: executing program 4 (id=1655): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4) sendto$packet(r2, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9", 0xe, 0x0, &(0x7f0000000540)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000002140)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(michael_mic-generic,xchacha20-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x7, &(0x7f00000000c0), 0x0) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, r5, 0x701, 0x0, 0x0, {0x16}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r4) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r8, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44080}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r8, 0x100, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20040084) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r10}, 0x10) r11 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="1400000016000b63d25a80648c2594f917240685", 0x14}], 0x1}, 0x0) pselect6(0x40, &(0x7f0000000080)={0x2, 0x6, 0x1, 0xec, 0xa93, 0x8, 0x400, 0x2}, &(0x7f0000000100)={0x2, 0xffffffff, 0x9, 0x829, 0x4, 0x0, 0x9, 0xb}, &(0x7f0000000140)={0x5, 0x1ff, 0xb1c, 0x3, 0x7, 0xeb5, 0x9, 0xffffffff80000001}, &(0x7f0000000180)={0x0, 0x3938700}, &(0x7f0000000200)={&(0x7f00000001c0)={[0x66c]}, 0x8}) sendmsg$netlink(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)={0x18, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}, @typed={0x4, 0x1d}]}, 0x18}], 0x1}, 0x300) 571.841027ms ago: executing program 3 (id=1656): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b000000000000000000000000800000fdffffff63e75698158982c6f0fbadb6bd9ef2ce024e323ccd815754ec775eb7811274af1e", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="18d6b15974281200"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r1, 0x27, 0x22, 0x0, &(0x7f00000002c0)="f8c348cc02cb29dcc8007f5b08009ccaa57b0fdf16e41d87a9a191192b98708c7c6f", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) (async) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000180)=0x17, 0x4) (async) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet6(0xa, 0x800, 0x2c) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x6}, 0x28) unshare(0x40020000) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399eb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r3, 0x0, 0x2}, 0x18) (async) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) close(0xffffffffffffffff) (async) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000009c0)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x84) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='blkio.bfq.dequeue\x00', 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000005200000", @ANYRES32, @ANYBLOB="01a500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001400"/28], 0x65) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB="7947999edb14cccd4427b19028966d282af04d0d0316b2b21f3af3f1b99a29eab71cfa8ecc783e5b0719fec087d1c5ca635fca1bf872ef998cdb8dfe14c1b402b9c156288ef66e31560cea59e2411d7309c2a532"], 0x47) (async) r4 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$int_in(r4, 0x5452, &(0x7f0000000040)=0x8) poll(&(0x7f0000000180)=[{r4}], 0x1, 0x107f) (async) setsockopt$sock_int(r4, 0x1, 0x7, &(0x7f0000000240), 0x4) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="080000020001000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000300)={0x40, 0x0, 0x0, 0x0, 0x65}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x13, &(0x7f00000001c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x400002, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff2}, 0x94) 571.295602ms ago: executing program 1 (id=1657): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r0, &(0x7f0000000080)="b8", 0x1, 0x40091, &(0x7f0000000280)={0xa, 0x4e23, 0x7, @mcast1, 0x63}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000480)={0x0, 0x9}, &(0x7f00000004c0)=0x8) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) listen(r0, 0x9) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008040) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) ioctl$sock_inet_SIOCGIFBRDADDR(r2, 0x8919, &(0x7f00000002c0)={'veth1_vlan\x00', {0x2, 0x0, @local}}) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x4d, 0x0, 0x0) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) accept$inet6(r1, 0x0, &(0x7f0000000240)) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f0000000180)={0x1, 'team0\x00', {}, 0xe9f6}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r4, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}, 0x1, 0x0, 0x0, 0x4800}, 0x20000000) 488.378811ms ago: executing program 2 (id=1658): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = accept(r0, &(0x7f0000000500)=@ll, &(0x7f0000000580)=0x80) pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r4, &(0x7f0000000200)=[{&(0x7f00000006c0)="e6", 0x1}], 0x1) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000000)="729804819e25bf1576ffe5c12a5207113f19d58313aba5de68f29cba9eabb7ffc8ffa6ff5e57bb2a1a4db35012bba91acdbe6123e6d1b0e9b009f638c2262aa71fdb6fdca6f5afd31515336efa9d3ac3d1dcb773d177640fa9d940ae528c0de4820b43c5ca5aadd87316a4539842e59b2b62294946b288ccec1b315ad96484c9ce1069450e4b459926691d6e833aa0bc56251cb81bd60c84e5c38f6d84f5e0d7", 0xa0}, {&(0x7f0000000880)="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", 0xf61}], 0x2) r5 = socket$kcm(0x29, 0x4, 0x0) r6 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r6, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC(r6, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x4, 0x0, @mcast2}, 0x1, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x100]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r6, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x1}, 0x5c) r7 = gettid() ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000005c0)=0x0) r9 = getgid() sendmmsg$unix(r2, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)="16b82752fb82961c6741eb27d56c", 0xe}, {&(0x7f0000000180)="479ca26b24ee74be386a974860fb6e01ffc51005ce202db4615ff7f9c98f10600d5d335e9ec9ab149d5c1c36339c0aadadb91751050daff90096228c93e23b9758a094762b88244920662fb6ece57f6854e91216562dede41b9039be7764044674ed7e7163c54c2f12bd27bc9730fbabcbd861cfd965698f558b6c482953c509dcff7925f9d8e9b355a7909b4c5a29d8b5b243284a41c0a49e2bfc9b24489a0cb239ad17a66480f345d099d28f98fc484cc4be2cabe5eb74e5e428ad7f5eb87945b8d558c9866c5b3680de0c2e378137d430421e2d4738e63d05aa0fe9c8c3ba3241009355f2205c8c", 0xe9}, {&(0x7f0000000280)="ea8016c613ecd28a279b873bd8133a", 0xf}, {&(0x7f0000000300)="0c6af51f12967af1d4a990d6d343b108713d1abf36c3300a63926ea3e015b9289b94e593c33710921113d247230eca50787eb46fefd501415e216ad8e340a7fe14aed31a69bdff4a7f4cd0c0e872d668418e7aa5954ac23720e680ece04665c7281a0ec6777f38899ea04fc2c8d5d3", 0x6f}, {&(0x7f0000000380)="57eb2d9045a6dbc2578cdba06cf68d326b4f68c36cafc202fc122bd1d46574ac72dad08c9e039bee09e9e786050d1d25cafaff748c14f204e1cb4bdab3f6695e156b392f64f4f811be7623baaf8aec6284a2068649c4af74604847e5faf9a0d982be46ae3024fce48f1cbedfc5b729173b91d6fbbdddb599ec4a2b5fbc7593c63575e0c7962b9ffff0c832d6ab53598323281f7776a3b4c1dc6704a7e1caa39154ec2d2f2f40737aeefc79cf989d63a43882af8e948f035de5383750320d742e93ca9e8edd79d2fb85cf2c043d513c", 0xcf}], 0x5, &(0x7f0000000600)=[@rights={{0x38, 0x1, 0x1, [r1, 0xffffffffffffffff, r0, r1, r1, r1, r1, r0, r0, r1]}}, @rights={{0x30, 0x1, 0x1, [r3, r0, r1, r4, r1, r0, r5, r6]}}, @cred={{0x1c, 0x1, 0x2, {r7, r8, r9}}}], 0x88, 0x842}}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000006c0)="7e658f3534b942c81e1327d148fcc3dff7728b0477a68374ee01e34b17f9e4e3042cd352511e5179999f1ab3b5bd557b50ea52d4c6e613109e3b1ef1c6685ac6ec854baaf57b467722bbb88cb1d16377ae21d86ca282dfd04d18194045326c3a36a17d496067118771b51fc18066c09172fc9845aa4553379bea3b02e6f83d03c1945af74f0921ed218fc62a", 0x8c}, {&(0x7f0000000780)="a030d4b838f1c278376b3a163381e569f31017d5918e2c3923074c6becc95da6504108e4fdd52c0162a1e7271c5ecb0dc6f8751e506851b48328715eccb59e7e89641f4761eb1072b2de1ece18c672b7316c142ee3b86920b05ff63cf302ebbf3c3bcfb1c8572b45fc6447d742ce26be2bca5c993daef4a7dd9f4836b068064d4f1156519bd62fcf696097cf", 0x8c}], 0x2, &(0x7f0000000880)=[@rights={{0x2c, 0x1, 0x1, [r1, r1, r1, r1, r0, r0, r1]}}], 0x30, 0x4080}}], 0x2, 0x4000000) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000006800090300000000000000000a80000064c138ae5671faa00800010001000000"], 0x24}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002040)=@newtaction={0x1f64, 0x30, 0x25, 0x0, 0x0, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x2}, {}, {}, {}, {0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0x0, 0x800000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xfffffffd}, {0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}, {0x10f8, 0x1, [@m_xt={0x180, 0x4, 0x0, 0x0, {{0x7}, {0x80, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_INDEX={0x8, 0x3, 0x31b}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}]}, {0xdc, 0x6, "7b0c0d7a92f81cdc652fb1299beabf9ce50553d39b212478666a69a4f1529b3f4df21f89bb005a2482ed07a4cfb959adba0afe71b2fddaf2f4e95bf5e5248fcfe2b19b8e5cd9167cccf096486c97edbe756b8f5b5a1386f8ee6050dcf4bbb5da72ebe591a5ca60683c5b105b88eea6a07d1c0dfc8c2f0445626670a0eaabd357c5933456a0741c2086551afa175f6569683eb3d19886c562a69b05d4e5ed2c3c9a77c1603863530aa996dbd52ffcbd056db32227371cfdecf71979cb597f610781a6d8ef228885e5b64f3d1a68b86fdb7700b25e137e099b"}, {0xc}, {0xc}}}, @m_xt={0x1b0, 0xa, 0x0, 0x0, {{0x7}, {0x158, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_TARG={0xf9, 0x6, {0x0, 'raw\x00', 0xfd, 0x7, "1a61531963d28b9e7e919d6aef88252131a324ffb7fc14f8f55e8239f5d00621e514ecc6e7f1ac7cba1365ec7a669e7ab7668a4f6055ad34d4061e69b367dbd14b53902bc13700e953aa1da8e50fef1607a50d417aa3c09dca968cd8a0a795278e0ad40f938e34e28e1a5c3d6969b2dc8cb4097aa7079c195476a11e83283d4116752a733060b4d12201d779e6ce0d64a19a8baac5fe9609c22473c6bd87b5a9eef66e7437dac7510bef861d9c5610b6be5b6a2144bd7689b779b3cae21a96145c36de2d07415d4b9bc273b07866c2"}}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0xfffeffff}]}, {0x31, 0x6, "4e3d3748a76212d4f2b5f1a5ff500df69419cf54a71991ab7fffaf032121117a328d384b2eb7fbed6c6cdb82ce"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0xbdc63b2f3af7dee1, 0x2}}}}, @m_police={0x954, 0xd, 0x0, 0x0, {{0xb}, {0x8c0, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8, 0x4, 0xfd8b}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x80, 0xa, 0x6, 0x8, 0xf, 0x2000, 0x8, 0x2, 0xffff64ef, 0xfffffff8, 0x40, 0x8, 0x8, 0xe88, 0x8, 0x2, 0xd04, 0x379, 0x1, 0x18db, 0xf3b5, 0x3, 0xa25, 0x2, 0x8a, 0x9, 0x0, 0x9, 0x8, 0x5, 0x5, 0xae, 0x8000, 0x5, 0x3ff, 0x461, 0x4, 0x7, 0x1b, 0xfff, 0x401, 0xfffffffc, 0x2d, 0x3, 0x6, 0x6, 0xd84, 0x5, 0x101, 0x800, 0x4, 0x9, 0x5, 0x0, 0xfd27, 0x0, 0x10000, 0x5, 0x7, 0x1000, 0x5, 0x5, 0x0, 0x5, 0x3ff, 0x7, 0xd8, 0x6, 0x4f78, 0x81, 0x4, 0x7, 0x100, 0x2, 0x3, 0xc, 0x100, 0x0, 0x20, 0x8, 0xffffffd0, 0xd, 0x2, 0x2, 0x6, 0x5, 0x7, 0x401, 0x3, 0xe, 0x0, 0x7, 0x9, 0x5, 0x2, 0x2, 0xa4e, 0x10001, 0x5, 0x4b2c, 0x2, 0x6, 0x9, 0x40, 0x81, 0x5, 0x1, 0x4, 0x1ff, 0xfffffff9, 0xf5a, 0x1e78, 0xe9a, 0x0, 0x8, 0x3, 0xff, 0x2, 0x0, 0x6, 0x2, 0x88, 0x7, 0x8000, 0x81, 0x8, 0x4800000, 0x7, 0x448, 0x0, 0x9642, 0x5, 0x7, 0x7, 0x2, 0x1, 0x80000000, 0x5, 0x7, 0x5, 0x2, 0xfc, 0x100, 0xb777, 0x2, 0x20, 0x7, 0x7, 0x7f, 0x0, 0x7, 0x52, 0x0, 0x5, 0x7, 0x8, 0x3, 0x5, 0x2a, 0x1, 0x425, 0x6f7a, 0x9, 0x401, 0x1, 0x101, 0xb11d, 0x7, 0x100, 0x6, 0xd8e, 0x8, 0x2, 0xccb, 0x8000, 0x0, 0x7, 0x2, 0x1ff, 0x3, 0x1, 0x10, 0x3, 0x2, 0x9, 0x10000, 0xb7, 0xfffffff0, 0x40000000, 0x7, 0x4f, 0xe77, 0x12, 0x2, 0x8, 0x8, 0x3, 0x7, 0x5, 0x800, 0x4, 0x13, 0x10, 0x401, 0x3, 0x7, 0x4, 0x0, 0x3, 0x7f, 0x5, 0x200, 0x3, 0x9, 0x4, 0x1000, 0x8, 0x8, 0xf, 0x5, 0x9, 0x3, 0xab, 0xa, 0x4, 0x8, 0x2, 0x8, 0x9, 0x7fffffff, 0x2, 0x0, 0x2, 0x7, 0x89d, 0x4, 0xfe500000, 0xe, 0x0, 0x9, 0x8, 0x49, 0xffffffff, 0xfffffff8, 0xcbac, 0x1, 0x5, 0x4, 0x1, 0x5, 0x8, 0x3, 0x7, 0x10000, 0x1, 0x2]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x1, 0x4da, 0xfffffffe, 0x0, {0x5, 0x2, 0x2, 0xe, 0xfffc}, {0xfa, 0x2e7a7cdc4abcc86a, 0x90, 0x8, 0x3, 0xfffffffa}, 0x9, 0x3}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xffff}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x43b3, 0x6b9617c0, 0x9, 0x4, 0x1e, 0xffffffff, 0x1, 0x0, 0x80, 0xfffffff7, 0x31, 0x3, 0x1470, 0x0, 0x80000000, 0x3, 0xd64000, 0x3, 0x7, 0xffffffc0, 0x2, 0xc84, 0xa, 0x5, 0x1, 0x6, 0xfffffffe, 0x8, 0x7f, 0x8, 0x5, 0x9, 0x1, 0x9e, 0x6, 0xe9, 0x3, 0x7, 0xfffffff9, 0x9f66, 0x7fffffff, 0x9, 0x80, 0x100000, 0x2, 0x46e, 0xeef, 0x7, 0xffff, 0x4, 0x2, 0x6, 0x8001, 0xc, 0x7f, 0x80000000, 0x5, 0xfff, 0x86, 0x1, 0x5, 0xfffffff5, 0x7286, 0xfffffff7, 0x9, 0x3, 0x9, 0x185, 0x6, 0x7, 0x1, 0x3, 0x80, 0x7, 0x7, 0xbfd, 0x6, 0x8, 0x7f, 0x800, 0x7, 0x800, 0x7, 0x1, 0x2, 0x1, 0x215b, 0x4, 0x1, 0x7f, 0x5, 0x8, 0x4, 0x7, 0x3e6, 0x80, 0x2, 0x81, 0x2, 0x5, 0x6, 0x8, 0x5, 0x4, 0x7, 0x1, 0xfffffffc, 0x8, 0x4b, 0x5624539d, 0x7f, 0x0, 0x2, 0x3, 0x40, 0xffff, 0x9, 0x8, 0x5, 0x4, 0x1, 0x6a, 0x6, 0x3, 0x1, 0x1, 0x1000, 0x2, 0xffffff80, 0x5, 0x2, 0x7, 0x0, 0x1000, 0x7ae, 0x0, 0x2, 0x5, 0x9, 0x80000001, 0x4, 0x3, 0x7a4, 0x2, 0xe9, 0xb76, 0xa0000, 0x3ff, 0x0, 0x8, 0x2, 0x5, 0x1, 0x9, 0x3ff, 0x9, 0xdca, 0x8, 0xffffffc0, 0x6, 0x5, 0x9, 0x80, 0x3, 0x0, 0xfffff852, 0x0, 0x80000001, 0x8, 0xecbb, 0x0, 0x9, 0x0, 0x3c, 0x18f3, 0xffff, 0xa07, 0xffffffff, 0x8, 0x5, 0x5, 0x800, 0x7, 0x8, 0xfff, 0x800, 0x2, 0x80000000, 0x5, 0x8, 0x4bcf, 0x1000, 0x9, 0xdd, 0x7fff, 0x101, 0x9, 0x3, 0x1, 0x7, 0x4, 0x2, 0x0, 0x5028cb9e, 0x0, 0x7, 0x2, 0x2374, 0xd779, 0xfffffffb, 0x8, 0x10001, 0x2, 0x7ff, 0x0, 0x7, 0x3, 0x5, 0x0, 0x1, 0x7, 0x5, 0x0, 0xffff, 0x3, 0x7, 0x5c, 0x3, 0xfffff1e9, 0x5, 0x24, 0x5, 0x2, 0x9, 0x9, 0x1, 0xff, 0x0, 0xc000, 0xbdee, 0x5, 0xffffffff, 0x4, 0x8, 0x7, 0x6, 0x8, 0x1, 0x8d, 0x5, 0x6, 0x5, 0x3, 0x8, 0xff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x20000000, 0x3, 0x7, 0xdcd2, {0xe, 0x0, 0xfff7, 0x10, 0x7, 0x1}, {0x1, 0x0, 0xff38, 0x4, 0x4, 0x3}, 0x32aa, 0x9, 0x3}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7ff}]]}, {0x6b, 0x6, "c0f68449f63c389e852cbd2ed11c4d84012a9831533cd35d45ac37097b27c4bb9a1f78216bb56267030de86869e2ef84029b4f5e859b5682e4a70b94c0d552130de0116253152266a6957b64ffe98e41122a7ec1dd047fab8192b2bca319f188a4f7d3eefc24db"}, {0xc, 0x7, {0x1}}, {0xc}}}, @m_vlan={0x104, 0x9, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x9d}]}, {0xc6, 0x6, "8181d65b09037e08b655b3802f2fc63a844589a1c19edc5829ad02d0dfec061b9fbbc456f9fd53faf20de13e156854a318372953a8d4a161c55f8e2c0bf14cf05364104085585ff55ada65cfbb926d1b3805d00f0029cca513c336390edb36310754c03601f5a1d3b833068e917999adfc18b409867bcf9293e32b28e884b0d1819f4f2656fec679f575e135acb334fd651227bf4f2dc34cab980eea81ade44fa69f3eec7fe34e252fa64635b4ccc1dc49feea5ffdf49347e87a156cc5fd505c82dc"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_nat={0x214, 0x8, 0x0, 0x0, {{0x8}, {0x11c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xea, 0x6, 0x6, 0x3, 0x7}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x2, 0x6, 0x43, 0xff}, @rand_addr=0x64010101, @empty, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x25, 0xb4, 0x10000005, 0x7, 0x8}, @rand_addr=0x64010102, @broadcast, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x6, 0x4, 0x3, 0xffff}, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xc}, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x4, 0x20000000, 0x4}, @private=0xa010102, @multicast1, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x6, 0x4, 0xd, 0x6}, @private=0xa010101, @loopback}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0xff, 0x6, 0x0, 0x8000}, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x1}}]}, {0xd2, 0x6, "42c5e22b595521a7c140722b725061bcdefc317330bcfcfd17e43625e735cc76de1dc5a97c7eca58d1bc1b73cd703799b71f8cf400d935683ac2913f3119f78a9ec2e47fdef639fca8400b032144f34820f920350704eb937e2e441857051230d8b0235d62a4c4f6128d314ee9bac309eede2491f86f8878217bf8daa17156095aa51bfe035f687ea38d380b05f8798988f60239d975e45d09bcd92fef76075997825027d4286837b1840f0d045d01c461e9c5de59fd4066681c9ef8997372a2bdbfa7a35b95df388365db4e75fa"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0xc07217b9ce30bcdb}}}}, @m_nat={0x158, 0x2, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0xca, 0x1, 0x9, 0xf}, @multicast1, @multicast1, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x7, 0x6, 0xd6f7, 0x4}, @private=0xa010102, @rand_addr=0x64010101, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x2, 0xffffffffdffffffe, 0x8, 0x3}, @multicast2, @multicast2, 0x0, 0x1}}]}, {0xb8, 0x6, "1c2a4ef2666581288966e2296b443100265161089f120de54f9d4932be2589eb2c693ff1f0e90fab0ec0aa3c7b0fc790f8765b73ca4eeac3ab1b2d28c1956cac5f83ed87854a5d15076849705e233634fb47c0f63f1c049cc4db7589fb736b16ead43750cd9b26fc9e2dd9eb57cf1c7b69852d3030396d84dd2f84ef6d26dbfc072eae476b8aed56198423e6ab5de54b7166ee6d719cc8634a8dbf5affe3d4d46ceb97b766c40b76e635bd5b367324fbc075f917"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x1f64}}, 0x0) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) 311.386934ms ago: executing program 4 (id=1659): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000c80)={0x14, r1, 0x411, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 220.016651ms ago: executing program 3 (id=1660): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010700000018000000006700000008003e01"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000880)={0x11e4, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x18}, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x3, 0x49}}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x7}, @NL80211_ATTR_VENDOR_DATA={0x1004, 0xc5, "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"}, @NL80211_ATTR_VENDOR_DATA={0xfd, 0xc5, "58ecd9e86c195ebf7dcf800aafce4e9763bda135b5700b906bbd06c457d5670b4e21a1827a597cdd1848e0a47dc15cab1a72570e5b64112bc6a2a46c5bcda7b78f63a300fd295b795151197c6e0c99a8e01e5709ff61b90b35e9f2fc9e8c3d42294edee031e847cc28af4ee6c79da9278c9143ff139e12c0806f7f97f474c3b64153659010a4de07541557b5c74151b8f622c8554117b399e93ef379be053bb153d7ca2ff52b62616aae754156444763e43159692d513305c6b139f994fb90be02367a23acb421d2e2edd785c792f3c3096528b7b1aeba3643e2582dcdcf0b2ef9b5b5d14633b0cd664e2cac53665ac6ad621573475b6fca51"}, @NL80211_ATTR_VENDOR_DATA={0x4}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x401}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x4}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x5}, @NL80211_ATTR_VENDOR_DATA={0x89, 0xc5, "9bce4eb5fd58016af537910839fa1fcf083399e939fa50b26213cf9324be135456a5d94fee08df057da1c2a8e6ff3bca535a2fac6fae85cf752e64bd023951307121fa4f2723b71cbfc4197bbbce4aeef17008a1761a20e5b3fa00cfb159fcfd16df7c74af113c28fc81bb237064264d0c64766db24fff50afa083450ca5cc6ccbcff81eaf"}]}, 0x11e4}, 0x1, 0x0, 0x0, 0x104}, 0x24004000) (async) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000880)={0x11e4, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x18}, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x3, 0x49}}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x7}, @NL80211_ATTR_VENDOR_DATA={0x1004, 0xc5, "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"}, @NL80211_ATTR_VENDOR_DATA={0xfd, 0xc5, "58ecd9e86c195ebf7dcf800aafce4e9763bda135b5700b906bbd06c457d5670b4e21a1827a597cdd1848e0a47dc15cab1a72570e5b64112bc6a2a46c5bcda7b78f63a300fd295b795151197c6e0c99a8e01e5709ff61b90b35e9f2fc9e8c3d42294edee031e847cc28af4ee6c79da9278c9143ff139e12c0806f7f97f474c3b64153659010a4de07541557b5c74151b8f622c8554117b399e93ef379be053bb153d7ca2ff52b62616aae754156444763e43159692d513305c6b139f994fb90be02367a23acb421d2e2edd785c792f3c3096528b7b1aeba3643e2582dcdcf0b2ef9b5b5d14633b0cd664e2cac53665ac6ad621573475b6fca51"}, @NL80211_ATTR_VENDOR_DATA={0x4}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x401}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x4}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x5}, @NL80211_ATTR_VENDOR_DATA={0x89, 0xc5, "9bce4eb5fd58016af537910839fa1fcf083399e939fa50b26213cf9324be135456a5d94fee08df057da1c2a8e6ff3bca535a2fac6fae85cf752e64bd023951307121fa4f2723b71cbfc4197bbbce4aeef17008a1761a20e5b3fa00cfb159fcfd16df7c74af113c28fc81bb237064264d0c64766db24fff50afa083450ca5cc6ccbcff81eaf"}]}, 0x11e4}, 0x1, 0x0, 0x0, 0x104}, 0x24004000) 165.557191ms ago: executing program 4 (id=1661): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200440e5}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$OBJ_GET_PROG(0x9, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={r1}) setsockopt$MRT6_DEL_MIF(r6, 0x29, 0xcb, &(0x7f0000000080)={0x1, 0x1, 0x0, r3, 0xce6}, 0xc) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfe, 0x2ffffffff}, 0xfffffffffffffd03) unshare(0x20000400) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r8, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e22, 0x80000, @dev={0xfe, 0x80, '\x00', 0x19}, 0xfffffffd}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="12000000000000002900008607096bb4d6f4c00000000000180000000000000029000000370000003a4c"], 0x30}, 0xc4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, r5, 0x0, 0x3, &(0x7f00000000c0)='+%\x00', 0x0}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r9}, 0x4) ioctl$FICLONE(r7, 0x40049409, 0xffffffffffffffff) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000500)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r2, @ANYBLOB="050424bd7000fedbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="8400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e63650040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67", @ANYRES32, @ANYBLOB], 0xa0}, 0x1, 0x0, 0x0, 0x4040800}, 0x24040084) (fail_nth: 6) 139.15352ms ago: executing program 3 (id=1662): r0 = socket$kcm(0x2d, 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000340)={r0}) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xc, 0xe, &(0x7f0000002e40)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_emit_ethernet(0xbe, &(0x7f00000006c0)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x73, 0x0, @private, @multicast1}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "4e67a18f22c389c686e230dad569e10e8805fa0937263bcfa629edc001f25d8e", "be9839c95286dfa79b225fd0caf2aa141fef2b529442b0cc4e40b61e91164f9f029002911e05976317d46d7c5d97a9f5", "16a169e1a95647ed3622d3a5a8aec3da8bdf7266c27ae204f8bc4169", {"7eadc62b33da4947754e1e15ff660b49", "5dd62da03f6e4fafb699d0ee6b2ea778"}}}}}}}, 0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYRESDEC=r1], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d575c621d46}, 0x44) bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) 115.908943ms ago: executing program 0 (id=1663): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001800)=ANY=[@ANYBLOB="1000000004004000000000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140), 0x3}, 0x20) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYRES16=r1], 0x0, 0x26}, 0x28) r3 = socket(0x10, 0x3, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018005c5ac528502740ba00000c000000020000000000000000000004000000000000"], 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r4, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=r5, 0x4) close(0x3) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f00000001c0)={0x4, 0x0, 0x7, 0x2}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001e008d2a2abd7000fbdbdf250a", @ANYRES32=0x0, @ANYBLOB="00000013"], 0x24}}, 0x40000c0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000000480)={0x0, 0x88, "1b8d21cb6273adecc96e145c6d6659f003dd8e8f369435a2252f339805e50215afcbd4cdd120e9516af373c3234b5fca864468ec2959e2da37981f23e631901d5d03836168df884443b5082c133be10600000000000000214c6216ccb84738019a462e81dc40385fbca3834db31ebb078c0ea8993c37f055c4d262262128e1fd41d0bba2d8df7b8f"}, &(0x7f0000000700)=0x90) syz_emit_ethernet(0x32, &(0x7f0000001840)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @remote, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x3, 0x3, 0x24, 0x64, 0x0, 0x81, 0x21, 0x0, @remote, @multicast2}, {{0x4e23, 0x4e22, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, 0x3, "60ba05", 0xff, "2e31f3"}}}}}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000680)={r6, 0x84, &(0x7f00000005c0)=[@in6={0xa, 0x4e22, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}, @in6={0xa, 0x4e22, 0x1, @empty, 0x6}, @in={0x2, 0x4e22, @rand_addr=0x64010100}, @in6={0xa, 0x4e22, 0x6, @loopback, 0x2b}, @in={0x2, 0x4e23, @local}, @in={0x2, 0x4e21, @multicast1}]}, &(0x7f00000006c0)=0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f00000009c0)=ANY=[@ANYRES64=r1], &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r7, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000280), 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8003}, 0x4) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r11, 0x89f2, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000400)={'ip6_vti0\x00', r8, 0x29, 0x2, 0x7, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x700, 0x7, 0x101, 0x3}}) sendmsg$nl_route_sched(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=@deltaction={0x50, 0x31, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x3c, 0x1, [{0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0x3ffd, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}]}, 0x50}}, 0x0) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x9, '\x00', 0x0, 0x0, 0x0, 0xffffffff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x2, 0xf, &(0x7f0000000040)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r12}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x6, 0x55, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x80800, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r15, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r14, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r15, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r16, 0xff07, 0x0) write$tun(r13, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], 0x3bf) 0s ago: executing program 3 (id=1664): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000740)=ANY=[@ANYBLOB="fc000000190001002dbd7000000000000000001e000000000000000000000001fe8000000000000000000000000000bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="000000009a5ab6e10c00000000000000040000000000000000000000000000000000000000000000ffffffffffffffff000000000020000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008000000000000000001000000000000004400050000000000000000000000000000000000000000003c00000002000000ffffffff00020000000000000000000006000000040100000000afe274d9da000000000000000000004c8a"], 0xfc}}, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r1, 0x0, 0xd, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xfffffff6, 0xc03, 0x1ff, 0x3, 0x7, 0x6, 0x0, 0x4, 0x7}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001640)=@deltfilter={0x24, 0x2d, 0x1, 0x70bd2c, 0x25dfdbf7, {0x0, 0x0, 0x0, r5, {0xb, 0x19}, {0x3, 0xfff1}, {0xe, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="0200"/18], 0x50) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="180800000004d318bd940000000000002bf30000000000000a21c2267fba8c52bc056d86488538fa1b3ee1b935cce07c367a"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r7, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x10, &(0x7f0000001380)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000540)={'ip6gre0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) r10 = accept4$packet(r9, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14, 0x80800) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x34) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r11, @ANYBLOB="0100f27e0920b2880000000000001c001700c6efa10000010000006e64000000000c00020008f5010006"], 0x3c}}, 0x11) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800b00010067656e657665000020000280140007000000000000000000000000000000000105000c000100000008000a00", @ANYRES32=r11], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) kernel console output (not intermixed with test programs): 8 callbacks suppressed [ 116.385666][ T7517] netlink: 52 bytes leftover after parsing attributes in process `syz.2.424'. [ 116.651809][ T7497] batadv_slave_0: entered promiscuous mode [ 116.850694][ T7531] netlink: 12 bytes leftover after parsing attributes in process `syz.2.427'. [ 117.180931][ T7541] bond1: option mode: unable to set because the bond device is up [ 117.239495][ T7541] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 117.264345][ T7541] bond1: (slave macvlan5): Enslaving as a backup interface with a down link [ 117.459759][ T7541] bond1: (slave macvlan5): Releasing backup interface [ 117.609557][ T7553] netlink: 12 bytes leftover after parsing attributes in process `syz.0.434'. [ 117.691364][ T7556] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 117.718936][ T7552] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 117.729843][ T7557] sctp: [Deprecated]: syz.4.436 (pid 7557) Use of int in max_burst socket option. [ 117.729843][ T7557] Use struct sctp_assoc_value instead [ 117.757849][ T5926] IPVS: starting estimator thread 0... [ 117.799535][ T7557] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 117.843151][ T7564] netlink: 28 bytes leftover after parsing attributes in process `syz.0.439'. [ 117.857322][ T7564] netlink: 48 bytes leftover after parsing attributes in process `syz.0.439'. [ 117.866341][ T7564] netlink: 8 bytes leftover after parsing attributes in process `syz.0.439'. [ 117.870628][ T7563] wg1 speed is unknown, defaulting to 1000 [ 117.875609][ T7560] IPVS: using max 41 ests per chain, 98400 per kthread [ 117.896049][ T7564] Bluetooth: MGMT ver 1.23 [ 117.916809][ T5872] Bluetooth: hci4: link tx timeout [ 117.922687][ T5872] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 117.931619][ T5869] Bluetooth: hci4: link tx timeout [ 117.942729][ T5869] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 117.963008][ T5869] Bluetooth: hci4: link tx timeout [ 117.968241][ T5869] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 117.978491][ T5869] Bluetooth: hci4: link tx timeout [ 117.984448][ T5869] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 117.992362][ T5869] Bluetooth: hci4: link tx timeout [ 117.997643][ T5869] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 118.024372][ T5869] Bluetooth: hci4: link tx timeout [ 118.029670][ T5869] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 118.037616][ T5869] Bluetooth: hci4: link tx timeout [ 118.043053][ T5869] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 118.631604][ T7587] netlink: 'syz.2.443': attribute type 1 has an invalid length. [ 118.648630][ T7587] netlink: 8 bytes leftover after parsing attributes in process `syz.2.443'. [ 118.889773][ T7593] bond1: option mode: unable to set because the bond device is up [ 118.914126][ T7593] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 118.926397][ T7593] bond1: (slave macvlan3): Enslaving as a backup interface with a down link [ 119.041895][ T7599] netlink: 'syz.1.448': attribute type 2 has an invalid length. [ 119.078392][ T7593] bond1: (slave macvlan3): Releasing backup interface [ 119.121589][ T7602] netlink: 12 bytes leftover after parsing attributes in process `syz.1.448'. [ 119.190589][ T7603] atomic_op ffff88807b898198 conn xmit_atomic 0000000000000000 [ 119.268072][ T7601] netlink: 68 bytes leftover after parsing attributes in process `syz.4.450'. [ 119.313939][ T7601] netlink: 44 bytes leftover after parsing attributes in process `syz.4.450'. [ 119.414025][ T7606] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 119.565958][ T7619] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 119.630597][ T7614] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 119.731747][ T7624] netlink: 'syz.4.455': attribute type 1 has an invalid length. [ 119.774957][ T7624] netlink: 'syz.4.455': attribute type 3 has an invalid length. [ 119.806234][ T7625] tipc: Started in network mode [ 119.816598][ T7625] tipc: Node identity 2eabf83c4bf7, cluster identity 4711 [ 119.865914][ T7625] tipc: Enabled bearer , priority 0 [ 119.887640][ T7624] syzkaller0: entered promiscuous mode [ 119.903182][ T7624] syzkaller0: entered allmulticast mode [ 119.962546][ T7623] tipc: Resetting bearer [ 120.012407][ T5872] Bluetooth: hci4: command 0x0405 tx timeout [ 120.022751][ T7623] tipc: Disabling bearer [ 120.135351][ T7631] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.225625][ T7635] nbd: must specify at least one socket [ 120.329108][ T7631] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.447331][ T7631] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.477629][ T7639] syz.2.461 (7639) used greatest stack depth: 17864 bytes left [ 120.485356][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 120.599127][ T7631] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.751534][ T1321] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.838027][ T1321] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.925793][ T6986] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.975949][ T6986] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.234613][ T7659] netlink: 'syz.0.468': attribute type 39 has an invalid length. [ 121.883902][ T7674] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 121.901235][ T7674] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 121.959379][ T7507] Set syz1 is full, maxelem 65536 reached [ 122.025299][ T7676] bond1: option mode: unable to set because the bond device is up [ 122.060034][ T7679] __nla_validate_parse: 1 callbacks suppressed [ 122.060050][ T7679] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.476'. [ 122.110634][ T7686] tipc: Trying to set illegal importance in message [ 122.124806][ T7686] netlink: 28 bytes leftover after parsing attributes in process `syz.3.478'. [ 122.233018][ T7693] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 122.300114][ T7698] syz_tun: entered allmulticast mode [ 122.321060][ T7698] dvmrp8: entered allmulticast mode [ 122.344805][ T7699] netlink: 'syz.2.482': attribute type 5 has an invalid length. [ 122.361310][ T7699] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.482'. [ 122.380178][ T7698] wg1 speed is unknown, defaulting to 1000 [ 122.493809][ T7707] netlink: 'syz.2.484': attribute type 6 has an invalid length. [ 122.503717][ T7709] netlink: 'syz.2.484': attribute type 6 has an invalid length. [ 122.720140][ T7718] 8021q: adding VLAN 0 to HW filter on device bond2 [ 122.778185][ T7721] wg1 speed is unknown, defaulting to 1000 [ 122.809932][ T7718] bridge_slave_0: left allmulticast mode [ 122.819507][ T7718] bridge_slave_0: left promiscuous mode [ 122.825349][ T7718] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.837081][ T7718] bridge_slave_1: left allmulticast mode [ 122.843184][ T7718] bridge_slave_1: left promiscuous mode [ 122.849113][ T7718] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.864939][ T7718] bond0: (slave bond_slave_0): Releasing backup interface [ 122.879206][ T7718] bond0: (slave bond_slave_1): Releasing backup interface [ 122.896357][ T7718] team0: Port device team_slave_0 removed [ 122.907374][ T7718] team0: Port device team_slave_1 removed [ 122.914915][ T7718] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.923264][ T7718] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.931709][ T7718] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.939921][ T7718] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.967004][ T5919] wg1 speed is unknown, defaulting to 1000 [ 123.000556][ T7677] syz_tun: left allmulticast mode [ 123.006679][ T7677] dvmrp8: left allmulticast mode [ 123.334330][ T7742] netlink: 16 bytes leftover after parsing attributes in process `syz.4.497'. [ 123.343402][ T7742] netlink: 24 bytes leftover after parsing attributes in process `syz.4.497'. [ 123.362368][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 123.394119][ T7743] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 123.427652][ T7743] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 123.486993][ T7747] wg1 speed is unknown, defaulting to 1000 [ 124.096539][ T7753] bond1: option mode: unable to set because the bond device is up [ 124.402118][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 124.529074][ T7768] wg1 speed is unknown, defaulting to 1000 [ 124.545057][ T7773] netlink: 34 bytes leftover after parsing attributes in process `syz.2.507'. [ 124.580845][ T7773] netlink: 'syz.2.507': attribute type 4 has an invalid length. [ 124.650929][ T7775] af_packet: tpacket_rcv: packet too big, clamped from 103 to 4294967272. macoff=96 [ 124.706568][ T7782] netlink: 8 bytes leftover after parsing attributes in process `syz.3.510'. [ 125.629182][ T7817] FAULT_INJECTION: forcing a failure. [ 125.629182][ T7817] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 125.672264][ T7817] CPU: 1 UID: 0 PID: 7817 Comm: syz.2.521 Not tainted syzkaller #0 PREEMPT(full) [ 125.672288][ T7817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 125.672297][ T7817] Call Trace: [ 125.672304][ T7817] [ 125.672312][ T7817] dump_stack_lvl+0x189/0x250 [ 125.672335][ T7817] ? __pfx____ratelimit+0x10/0x10 [ 125.672352][ T7817] ? __pfx_dump_stack_lvl+0x10/0x10 [ 125.672370][ T7817] ? __pfx__printk+0x10/0x10 [ 125.672390][ T7817] ? __might_fault+0xb0/0x130 [ 125.672421][ T7817] should_fail_ex+0x414/0x560 [ 125.672447][ T7817] _copy_from_user+0x2d/0xb0 [ 125.672466][ T7817] __sys_bpf+0x1ed/0x870 [ 125.672488][ T7817] ? __pfx___sys_bpf+0x10/0x10 [ 125.672527][ T7817] ? ksys_write+0x22a/0x250 [ 125.672549][ T7817] ? __pfx_ksys_write+0x10/0x10 [ 125.672567][ T7817] ? rcu_is_watching+0x15/0xb0 [ 125.672591][ T7817] __x64_sys_bpf+0x7c/0x90 [ 125.672610][ T7817] do_syscall_64+0xfa/0x3b0 [ 125.672625][ T7817] ? lockdep_hardirqs_on+0x9c/0x150 [ 125.672640][ T7817] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.672656][ T7817] ? clear_bhb_loop+0x60/0xb0 [ 125.672674][ T7817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.672688][ T7817] RIP: 0033:0x7f5c8e58ebe9 [ 125.672703][ T7817] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.672715][ T7817] RSP: 002b:00007f5c8f455038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 125.672734][ T7817] RAX: ffffffffffffffda RBX: 00007f5c8e7c5fa0 RCX: 00007f5c8e58ebe9 [ 125.672745][ T7817] RDX: 00000000000000aa RSI: 0000200000000600 RDI: 000000000000000a [ 125.672755][ T7817] RBP: 00007f5c8f455090 R08: 0000000000000000 R09: 0000000000000000 [ 125.672765][ T7817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.672774][ T7817] R13: 00007f5c8e7c6038 R14: 00007f5c8e7c5fa0 R15: 00007fff1f920058 [ 125.672801][ T7817] [ 125.752298][ T7818] netlink: 224 bytes leftover after parsing attributes in process `syz.1.519'. [ 125.964319][ T7823] syzkaller0: entered promiscuous mode [ 125.975459][ T7823] syzkaller0: entered allmulticast mode [ 126.096542][ T7825] wg1 speed is unknown, defaulting to 1000 [ 126.158031][ T7830] Set syz1 is full, maxelem 65536 reached [ 126.207507][ T7832] netlink: 24 bytes leftover after parsing attributes in process `syz.1.526'. [ 126.226153][ T7832] team0: Unable to change to the same mode the team is in [ 126.488307][ T7850] netlink: 'syz.3.533': attribute type 1 has an invalid length. [ 126.651136][ T7858] 8021q: adding VLAN 0 to HW filter on device bond4 [ 126.668744][ T7858] bond3: (slave bond4): making interface the new active one [ 126.715489][ T7858] bond3: (slave bond4): Enslaving as an active interface with an up link [ 126.898360][ T7870] netlink: 24 bytes leftover after parsing attributes in process `syz.0.539'. [ 126.927562][ T7870] team0: Mode changed to "loadbalance" [ 127.008201][ T7874] wg1 speed is unknown, defaulting to 1000 [ 127.102847][ T7885] openvswitch: netlink: Key type 13066 is out of range max 32 [ 127.170870][ T7887] __nla_validate_parse: 1 callbacks suppressed [ 127.170886][ T7887] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.545'. [ 127.200321][ T7885] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 127.636800][ T7913] FAULT_INJECTION: forcing a failure. [ 127.636800][ T7913] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 127.638409][ T7911] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 127.654437][ T7913] CPU: 0 UID: 0 PID: 7913 Comm: syz.2.553 Not tainted syzkaller #0 PREEMPT(full) [ 127.654467][ T7913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 127.654481][ T7913] Call Trace: [ 127.654488][ T7913] [ 127.654496][ T7913] dump_stack_lvl+0x189/0x250 [ 127.654519][ T7913] ? __pfx____ratelimit+0x10/0x10 [ 127.654537][ T7913] ? __pfx_dump_stack_lvl+0x10/0x10 [ 127.654555][ T7913] ? __pfx__printk+0x10/0x10 [ 127.654588][ T7913] should_fail_ex+0x414/0x560 [ 127.654614][ T7913] _copy_from_user+0x2d/0xb0 [ 127.654633][ T7913] bpf_test_init+0xf8/0x170 [ 127.654654][ T7913] bpf_prog_test_run_xdp+0x37c/0x1000 [ 127.654685][ T7913] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 127.654706][ T7913] ? __fget_files+0x2a/0x420 [ 127.654726][ T7913] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 127.654743][ T7913] bpf_prog_test_run+0x2c7/0x340 [ 127.654767][ T7913] __sys_bpf+0x581/0x870 [ 127.654789][ T7913] ? __pfx___sys_bpf+0x10/0x10 [ 127.654821][ T7913] ? ksys_write+0x22a/0x250 [ 127.654844][ T7913] ? __pfx_ksys_write+0x10/0x10 [ 127.654860][ T7913] ? rcu_is_watching+0x15/0xb0 [ 127.654884][ T7913] __x64_sys_bpf+0x7c/0x90 [ 127.654903][ T7913] do_syscall_64+0xfa/0x3b0 [ 127.654918][ T7913] ? lockdep_hardirqs_on+0x9c/0x150 [ 127.654934][ T7913] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.654949][ T7913] ? clear_bhb_loop+0x60/0xb0 [ 127.654968][ T7913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.654983][ T7913] RIP: 0033:0x7f5c8e58ebe9 [ 127.654998][ T7913] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.655011][ T7913] RSP: 002b:00007f5c8f455038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 127.655028][ T7913] RAX: ffffffffffffffda RBX: 00007f5c8e7c5fa0 RCX: 00007f5c8e58ebe9 [ 127.655040][ T7913] RDX: 00000000000000aa RSI: 0000200000000600 RDI: 000000000000000a [ 127.655050][ T7913] RBP: 00007f5c8f455090 R08: 0000000000000000 R09: 0000000000000000 [ 127.655059][ T7913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.655069][ T7913] R13: 00007f5c8e7c6038 R14: 00007f5c8e7c5fa0 R15: 00007fff1f920058 [ 127.655096][ T7913] [ 127.886164][ T7923] netlink: 24 bytes leftover after parsing attributes in process `syz.2.557'. [ 127.891913][ T7915] FAULT_INJECTION: forcing a failure. [ 127.891913][ T7915] name failslab, interval 1, probability 0, space 0, times 0 [ 127.910817][ T7915] CPU: 1 UID: 0 PID: 7915 Comm: syz.1.554 Not tainted syzkaller #0 PREEMPT(full) [ 127.910838][ T7915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 127.910848][ T7915] Call Trace: [ 127.910854][ T7915] [ 127.910862][ T7915] dump_stack_lvl+0x189/0x250 [ 127.910886][ T7915] ? __pfx____ratelimit+0x10/0x10 [ 127.910903][ T7915] ? __pfx_dump_stack_lvl+0x10/0x10 [ 127.910920][ T7915] ? __pfx__printk+0x10/0x10 [ 127.910947][ T7915] ? __pfx___might_resched+0x10/0x10 [ 127.910960][ T7915] ? fs_reclaim_acquire+0x7d/0x100 [ 127.910987][ T7915] should_fail_ex+0x414/0x560 [ 127.911013][ T7915] should_failslab+0xa8/0x100 [ 127.911035][ T7915] __kmalloc_cache_noprof+0x70/0x3d0 [ 127.911054][ T7915] ? flow_indr_dev_setup_offload+0x255/0x670 [ 127.911084][ T7915] flow_indr_dev_setup_offload+0x255/0x670 [ 127.911108][ T7915] ? __pfx_tc_block_indr_cleanup+0x10/0x10 [ 127.911129][ T7915] tcf_block_offload_cmd+0x273/0x370 [ 127.911153][ T7915] ? __pfx_tcf_block_offload_cmd+0x10/0x10 [ 127.911176][ T7915] ? __pfx_down_write+0x10/0x10 [ 127.911199][ T7915] ? tcf_block_get_ext+0x8d4/0x17d0 [ 127.911224][ T7915] tcf_block_get_ext+0xfce/0x17d0 [ 127.911248][ T7915] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.911273][ T7915] tcf_block_get+0x67/0xa0 [ 127.911286][ T7915] ? __pfx_tcf_chain_head_change_dflt+0x10/0x10 [ 127.911305][ T7915] multiq_init+0x6d/0x2c0 [ 127.911328][ T7915] ? __pfx_multiq_init+0x10/0x10 [ 127.911348][ T7915] qdisc_create+0x7ac/0xea0 [ 127.911376][ T7915] tc_modify_qdisc+0x1538/0x20e0 [ 127.911411][ T7915] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 127.911469][ T7915] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 127.911487][ T7915] rtnetlink_rcv_msg+0x77c/0xb70 [ 127.911503][ T7915] ? __lock_acquire+0xab9/0xd20 [ 127.911525][ T7915] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 127.911539][ T7915] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 127.911571][ T7915] netlink_rcv_skb+0x205/0x470 [ 127.911585][ T7915] ? __lock_acquire+0xab9/0xd20 [ 127.911605][ T7915] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 127.911623][ T7915] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 127.911653][ T7915] ? netlink_deliver_tap+0x2e/0x1b0 [ 127.911679][ T7915] netlink_unicast+0x82f/0x9e0 [ 127.911711][ T7915] ? __pfx_netlink_unicast+0x10/0x10 [ 127.911735][ T7915] ? netlink_sendmsg+0x642/0xb30 [ 127.911750][ T7915] ? skb_put+0x11b/0x210 [ 127.911773][ T7915] netlink_sendmsg+0x805/0xb30 [ 127.911801][ T7915] ? __pfx_netlink_sendmsg+0x10/0x10 [ 127.911822][ T7915] ? aa_sock_msg_perm+0xf1/0x1d0 [ 127.911842][ T7915] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 127.911859][ T7915] ? __pfx_netlink_sendmsg+0x10/0x10 [ 127.911878][ T7915] __sock_sendmsg+0x219/0x270 [ 127.911905][ T7915] ____sys_sendmsg+0x505/0x830 [ 127.911932][ T7915] ? __pfx_____sys_sendmsg+0x10/0x10 [ 127.911962][ T7915] ? import_iovec+0x74/0xa0 [ 127.911989][ T7915] ___sys_sendmsg+0x21f/0x2a0 [ 127.912008][ T7915] ? __pfx____sys_sendmsg+0x10/0x10 [ 127.912062][ T7915] ? __fget_files+0x2a/0x420 [ 127.912075][ T7915] ? __fget_files+0x3a0/0x420 [ 127.912097][ T7915] __x64_sys_sendmsg+0x19b/0x260 [ 127.912116][ T7915] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 127.912142][ T7915] ? __pfx_ksys_write+0x10/0x10 [ 127.912160][ T7915] ? rcu_is_watching+0x15/0xb0 [ 127.912180][ T7915] ? do_syscall_64+0xbe/0x3b0 [ 127.912201][ T7915] do_syscall_64+0xfa/0x3b0 [ 127.912217][ T7915] ? lockdep_hardirqs_on+0x9c/0x150 [ 127.912232][ T7915] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.912247][ T7915] ? clear_bhb_loop+0x60/0xb0 [ 127.912266][ T7915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.912280][ T7915] RIP: 0033:0x7f6a38f8ebe9 [ 127.912295][ T7915] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.912307][ T7915] RSP: 002b:00007f6a39e66038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 127.912326][ T7915] RAX: ffffffffffffffda RBX: 00007f6a391c5fa0 RCX: 00007f6a38f8ebe9 [ 127.912337][ T7915] RDX: 0000000000000800 RSI: 00002000000012c0 RDI: 0000000000000003 [ 127.912347][ T7915] RBP: 00007f6a39e66090 R08: 0000000000000000 R09: 0000000000000000 [ 127.912357][ T7915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.912366][ T7915] R13: 00007f6a391c6038 R14: 00007f6a391c5fa0 R15: 00007ffda5850428 [ 127.912396][ T7915] [ 128.514882][ T7932] wg1 speed is unknown, defaulting to 1000 [ 128.888197][ T7960] netlink: 60 bytes leftover after parsing attributes in process `syz.1.566'. [ 128.911297][ T6986] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80 [ 128.951832][ T7965] netlink: 8 bytes leftover after parsing attributes in process `syz.0.568'. [ 129.369131][ T7988] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 129.379014][ T7988] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 129.734044][ T7991] netlink: 'syz.1.576': attribute type 1 has an invalid length. [ 129.786863][ T7991] 8021q: adding VLAN 0 to HW filter on device bond2 [ 129.810370][ T7997] 8021q: adding VLAN 0 to HW filter on device bond2 [ 129.819694][ T7997] bond2: (slave vcan0): The slave device specified does not support setting the MAC address [ 129.823147][ T7999] netlink: 32 bytes leftover after parsing attributes in process `syz.2.579'. [ 129.841623][ T7997] bond2: (slave vcan0): Error -95 calling set_mac_address [ 129.863489][ T7996] tipc: Enabling of bearer rejected, failed to enable media [ 129.877886][ T7991] gretap1: entered promiscuous mode [ 129.885524][ T7991] bond2: (slave gretap1): making interface the new active one [ 129.894540][ T7991] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 129.981406][ T8004] netlink: 8 bytes leftover after parsing attributes in process `syz.1.580'. [ 129.999579][ T8004] netlink: 20 bytes leftover after parsing attributes in process `syz.1.580'. [ 130.039022][ T8004] geneve2: entered promiscuous mode [ 130.044483][ T8004] geneve2: entered allmulticast mode [ 130.076107][ T8011] netlink: 24 bytes leftover after parsing attributes in process `syz.0.581'. [ 130.147049][ T1053] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.159648][ T1053] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.170754][ T8011] team0: Unable to change to the same mode the team is in [ 130.181257][ T1053] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.218461][ T1053] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.657182][ T8031] netlink: 264 bytes leftover after parsing attributes in process `syz.1.587'. [ 130.681871][ T8031] netlink: 56 bytes leftover after parsing attributes in process `syz.1.587'. [ 130.965246][ T8053] netlink: 'syz.3.595': attribute type 3 has an invalid length. [ 132.004058][ T8098] netlink: 'syz.4.603': attribute type 1 has an invalid length. [ 132.747038][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.159101][ T8115] __nla_validate_parse: 5 callbacks suppressed [ 133.159118][ T8115] netlink: 14 bytes leftover after parsing attributes in process `syz.3.606'. [ 133.703841][ T8135] syzkaller1: entered allmulticast mode [ 133.714786][ T8136] FAULT_INJECTION: forcing a failure. [ 133.714786][ T8136] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 133.788500][ T8136] CPU: 0 UID: 0 PID: 8136 Comm: syz.2.613 Not tainted syzkaller #0 PREEMPT(full) [ 133.788524][ T8136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 133.788535][ T8136] Call Trace: [ 133.788542][ T8136] [ 133.788550][ T8136] dump_stack_lvl+0x189/0x250 [ 133.788575][ T8136] ? __pfx____ratelimit+0x10/0x10 [ 133.788593][ T8136] ? __pfx_dump_stack_lvl+0x10/0x10 [ 133.788613][ T8136] ? __pfx__printk+0x10/0x10 [ 133.788647][ T8136] should_fail_ex+0x414/0x560 [ 133.788674][ T8136] _copy_to_user+0x31/0xb0 [ 133.788696][ T8136] simple_read_from_buffer+0xe1/0x170 [ 133.788723][ T8136] proc_fail_nth_read+0x1b3/0x220 [ 133.788745][ T8136] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 133.788767][ T8136] ? rw_verify_area+0x2a6/0x4d0 [ 133.788785][ T8136] ? __lock_acquire+0xab9/0xd20 [ 133.788805][ T8136] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 133.788831][ T8136] vfs_read+0x1fd/0xa30 [ 133.788850][ T8136] ? fdget_pos+0x247/0x320 [ 133.788870][ T8136] ? __pfx___mutex_lock+0x10/0x10 [ 133.788889][ T8136] ? __pfx_vfs_read+0x10/0x10 [ 133.788911][ T8136] ? __fget_files+0x2a/0x420 [ 133.788931][ T8136] ? __fget_files+0x3a0/0x420 [ 133.788944][ T8136] ? __fget_files+0x2a/0x420 [ 133.788970][ T8136] ksys_read+0x145/0x250 [ 133.788992][ T8136] ? __pfx_ksys_read+0x10/0x10 [ 133.789010][ T8136] ? rcu_is_watching+0x15/0xb0 [ 133.789032][ T8136] ? do_syscall_64+0xbe/0x3b0 [ 133.789054][ T8136] do_syscall_64+0xfa/0x3b0 [ 133.789070][ T8136] ? lockdep_hardirqs_on+0x9c/0x150 [ 133.789087][ T8136] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.789104][ T8136] ? clear_bhb_loop+0x60/0xb0 [ 133.789124][ T8136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.789140][ T8136] RIP: 0033:0x7f5c8e58d5fc [ 133.789155][ T8136] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 133.789169][ T8136] RSP: 002b:00007f5c8f455030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 133.789187][ T8136] RAX: ffffffffffffffda RBX: 00007f5c8e7c5fa0 RCX: 00007f5c8e58d5fc [ 133.789199][ T8136] RDX: 000000000000000f RSI: 00007f5c8f4550a0 RDI: 0000000000000004 [ 133.789210][ T8136] RBP: 00007f5c8f455090 R08: 0000000000000000 R09: 0000000000000000 [ 133.789220][ T8136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.789230][ T8136] R13: 00007f5c8e7c6038 R14: 00007f5c8e7c5fa0 R15: 00007fff1f920058 [ 133.789261][ T8136] [ 134.153101][ T8142] syz_tun: entered allmulticast mode [ 134.230260][ T8140] syz_tun: left allmulticast mode [ 134.877511][ T8178] netlink: 28 bytes leftover after parsing attributes in process `syz.3.621'. [ 135.106088][ T8192] netlink: 'syz.1.625': attribute type 2 has an invalid length. [ 135.567662][ T8219] netlink: 8 bytes leftover after parsing attributes in process `syz.3.626'. [ 135.578386][ T8217] netlink: 24 bytes leftover after parsing attributes in process `syz.0.632'. [ 135.637045][ T8222] netlink: 16 bytes leftover after parsing attributes in process `syz.0.632'. [ 136.339233][ T8243] netlink: 52 bytes leftover after parsing attributes in process `syz.1.636'. [ 136.990033][ T8267] netlink: 48 bytes leftover after parsing attributes in process `syz.4.641'. [ 194.171207][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 196.242658][ T5863] Bluetooth: hci3: command 0x0406 tx timeout [ 196.244578][ T5877] Bluetooth: hci2: command 0x0406 tx timeout [ 196.248713][ T5863] Bluetooth: hci1: command 0x0406 tx timeout [ 200.405982][ T8339] netlink: 12 bytes leftover after parsing attributes in process `syz.0.643'. [ 200.422137][ T8339] openvswitch: netlink: Flow key attr not present in new flow. [ 200.468924][ T8345] syzkaller0: entered promiscuous mode [ 200.474684][ T8345] syzkaller0: entered allmulticast mode [ 200.558970][ T8351] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 200.585031][ T8351] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 200.751901][ T8358] bond1: option mode: unable to set because the bond device is up [ 200.851073][ T8358] dummy0: entered promiscuous mode [ 200.870238][ T8364] netlink: 248 bytes leftover after parsing attributes in process `syz.2.652'. [ 200.879551][ T8358] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 200.911034][ T8358] bond1: (slave macvlan3): Enslaving as a backup interface with an up link [ 200.921153][ T6984] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 200.937520][ T8362] netlink: 12 bytes leftover after parsing attributes in process `syz.0.651'. [ 200.955433][ T8359] bond0: (slave dummy0): Releasing backup interface [ 200.967570][ T8359] dummy0: left promiscuous mode [ 200.991018][ T8359] bond1: (slave macvlan3): Removing an active aggregator [ 200.999966][ T8359] bond1: (slave macvlan3): Releasing backup interface [ 201.103984][ T8362] 8021q: adding VLAN 0 to HW filter on device bond1 [ 201.209783][ T8366] 8021q: adding VLAN 0 to HW filter on device bond1 [ 201.225813][ T8366] bond1: (slave vxcan1): The slave device specified does not support setting the MAC address [ 201.238092][ T8366] bond1: (slave vxcan1): Error -95 calling set_mac_address [ 201.284320][ T8370] lo speed is unknown, defaulting to 1000 [ 201.309088][ T8374] netlink: 8 bytes leftover after parsing attributes in process `syz.4.654'. [ 201.337010][ T8370] lo speed is unknown, defaulting to 1000 [ 201.338011][ T8365] wg1 speed is unknown, defaulting to 1000 [ 201.357996][ T8370] lo speed is unknown, defaulting to 1000 [ 201.383404][ T8373] netlink: 'syz.2.653': attribute type 4 has an invalid length. [ 201.477079][ T8370] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 201.514387][ T8370] lo speed is unknown, defaulting to 1000 [ 201.536753][ T8370] lo speed is unknown, defaulting to 1000 [ 201.544569][ T8370] lo speed is unknown, defaulting to 1000 [ 201.627888][ T8370] lo speed is unknown, defaulting to 1000 [ 201.627961][ T8380] bond1: option mode: unable to set because the bond device is up [ 201.645147][ T8370] lo speed is unknown, defaulting to 1000 [ 201.653007][ T8370] lo speed is unknown, defaulting to 1000 [ 201.720761][ T8380] 8021q: adding VLAN 0 to HW filter on device macvlan6 [ 201.734062][ T8380] bond1: (slave macvlan6): Enslaving as a backup interface with a down link [ 201.787250][ T8380] bond2: (slave gretap1): Releasing active interface [ 201.809174][ T8380] bond1: (slave macvlan6): Releasing backup interface [ 201.887434][ T8385] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.959441][ T8387] bond1: option mode: unable to set because the bond device is up [ 201.980734][ T8391] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 201.996292][ T8391] bond1: (slave macvlan4): Enslaving as a backup interface with a down link [ 202.166868][ T8387] bond1: (slave macvlan4): Releasing backup interface [ 202.242400][ T8385] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.249813][ T8403] netlink: 8 bytes leftover after parsing attributes in process `syz.1.661'. [ 202.337288][ T8385] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.366094][ T8403] netlink: 4 bytes leftover after parsing attributes in process `syz.1.661'. [ 202.458332][ T8385] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.658239][ T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.812079][ T6986] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.832253][ T6986] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.876936][ T6984] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.980679][ T8425] FAULT_INJECTION: forcing a failure. [ 202.980679][ T8425] name failslab, interval 1, probability 0, space 0, times 0 [ 203.013378][ T8428] bond1: option mode: unable to set because the bond device is up [ 203.016552][ T8425] CPU: 0 UID: 0 PID: 8425 Comm: syz.2.671 Not tainted syzkaller #0 PREEMPT(full) [ 203.016574][ T8425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 203.016584][ T8425] Call Trace: [ 203.016592][ T8425] [ 203.016599][ T8425] dump_stack_lvl+0x189/0x250 [ 203.016624][ T8425] ? __pfx____ratelimit+0x10/0x10 [ 203.016642][ T8425] ? __pfx_dump_stack_lvl+0x10/0x10 [ 203.016661][ T8425] ? __pfx__printk+0x10/0x10 [ 203.016685][ T8425] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 203.016715][ T8425] ? lockdep_hardirqs_on+0x9c/0x150 [ 203.016737][ T8425] should_fail_ex+0x414/0x560 [ 203.016764][ T8425] should_failslab+0xa8/0x100 [ 203.016787][ T8425] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 203.016808][ T8425] ? __alloc_skb+0x112/0x2d0 [ 203.016830][ T8425] __alloc_skb+0x112/0x2d0 [ 203.016850][ T8425] create_monitor_ctrl_open+0x156/0x880 [ 203.016877][ T8425] ? __pfx_create_monitor_ctrl_open+0x10/0x10 [ 203.016898][ T8425] ? bpf_lsm_capable+0x9/0x20 [ 203.016928][ T8425] hci_sock_ioctl+0x2f2/0x910 [ 203.016951][ T8425] sock_do_ioctl+0xd9/0x300 [ 203.016976][ T8425] ? __pfx_sock_do_ioctl+0x10/0x10 [ 203.016994][ T8425] ? __lock_acquire+0xab9/0xd20 [ 203.017032][ T8425] sock_ioctl+0x576/0x790 [ 203.017054][ T8425] ? __pfx_sock_ioctl+0x10/0x10 [ 203.017075][ T8425] ? __fget_files+0x2a/0x420 [ 203.017088][ T8425] ? __fget_files+0x3a0/0x420 [ 203.017101][ T8425] ? __fget_files+0x2a/0x420 [ 203.017119][ T8425] ? bpf_lsm_file_ioctl+0x9/0x20 [ 203.017138][ T8425] ? __pfx_sock_ioctl+0x10/0x10 [ 203.017157][ T8425] __se_sys_ioctl+0xf9/0x170 [ 203.017179][ T8425] do_syscall_64+0xfa/0x3b0 [ 203.017194][ T8425] ? lockdep_hardirqs_on+0x9c/0x150 [ 203.017209][ T8425] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.017225][ T8425] ? clear_bhb_loop+0x60/0xb0 [ 203.017244][ T8425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.017259][ T8425] RIP: 0033:0x7f5c8e58ebe9 [ 203.017275][ T8425] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.017288][ T8425] RSP: 002b:00007f5c8f455038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 203.017305][ T8425] RAX: ffffffffffffffda RBX: 00007f5c8e7c5fa0 RCX: 00007f5c8e58ebe9 [ 203.017317][ T8425] RDX: 0000200000000080 RSI: 00000000800448d4 RDI: 0000000000000004 [ 203.017327][ T8425] RBP: 00007f5c8f455090 R08: 0000000000000000 R09: 0000000000000000 [ 203.017337][ T8425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.017350][ T8425] R13: 00007f5c8e7c6038 R14: 00007f5c8e7c5fa0 R15: 00007fff1f920058 [ 203.017379][ T8425] [ 203.553926][ T8428] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 203.564277][ T8428] bond1: (slave macvlan5): Enslaving as a backup interface with a down link [ 203.621793][ T8431] bond1: (slave macvlan5): Releasing backup interface [ 203.637476][ T8436] bond1: option mode: unable to set because the bond device is up [ 203.670347][ T8436] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 203.701918][ T8436] bond1: (slave macvlan4): Enslaving as a backup interface with a down link [ 203.793748][ T8439] bond1: (slave macvlan4): Releasing backup interface [ 204.046045][ T8448] syzkaller0: entered promiscuous mode [ 204.051606][ T8448] syzkaller0: entered allmulticast mode [ 204.060877][ T8447] netlink: 'syz.4.678': attribute type 12 has an invalid length. [ 204.109641][ T8453] netlink: 12 bytes leftover after parsing attributes in process `syz.4.678'. [ 205.556765][ T8478] netlink: 'syz.1.685': attribute type 12 has an invalid length. [ 205.589413][ T8479] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.623732][ T8475] netlink: 12 bytes leftover after parsing attributes in process `syz.1.685'. [ 205.639820][ T8482] tipc: Enabling of bearer rejected, failed to enable media [ 205.686159][ T8479] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.772277][ T8498] FAULT_INJECTION: forcing a failure. [ 205.772277][ T8498] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 205.785680][ T8498] CPU: 0 UID: 0 PID: 8498 Comm: syz.2.689 Not tainted syzkaller #0 PREEMPT(full) [ 205.785701][ T8498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 205.785711][ T8498] Call Trace: [ 205.785718][ T8498] [ 205.785726][ T8498] dump_stack_lvl+0x189/0x250 [ 205.785750][ T8498] ? __pfx____ratelimit+0x10/0x10 [ 205.785767][ T8498] ? __pfx_dump_stack_lvl+0x10/0x10 [ 205.785786][ T8498] ? __pfx__printk+0x10/0x10 [ 205.785808][ T8498] ? __might_fault+0xb0/0x130 [ 205.785841][ T8498] should_fail_ex+0x414/0x560 [ 205.785868][ T8498] _copy_from_user+0x2d/0xb0 [ 205.785888][ T8498] hci_get_conn_list+0x93/0x740 [ 205.785910][ T8498] ? __local_bh_enable_ip+0x12d/0x1c0 [ 205.785927][ T8498] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 205.785946][ T8498] ? do_raw_spin_unlock+0x122/0x240 [ 205.785965][ T8498] ? __pfx_hci_get_conn_list+0x10/0x10 [ 205.785983][ T8498] ? hci_sock_ioctl+0x346/0x910 [ 205.786003][ T8498] ? hci_sock_ioctl+0x583/0x910 [ 205.786025][ T8498] sock_do_ioctl+0xd9/0x300 [ 205.786050][ T8498] ? __pfx_sock_do_ioctl+0x10/0x10 [ 205.786069][ T8498] ? __lock_acquire+0xab9/0xd20 [ 205.786106][ T8498] sock_ioctl+0x576/0x790 [ 205.786130][ T8498] ? __pfx_sock_ioctl+0x10/0x10 [ 205.786151][ T8498] ? __fget_files+0x2a/0x420 [ 205.786165][ T8498] ? __fget_files+0x3a0/0x420 [ 205.786179][ T8498] ? __fget_files+0x2a/0x420 [ 205.786197][ T8498] ? bpf_lsm_file_ioctl+0x9/0x20 [ 205.786217][ T8498] ? __pfx_sock_ioctl+0x10/0x10 [ 205.786237][ T8498] __se_sys_ioctl+0xf9/0x170 [ 205.786259][ T8498] do_syscall_64+0xfa/0x3b0 [ 205.786276][ T8498] ? lockdep_hardirqs_on+0x9c/0x150 [ 205.786292][ T8498] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.786308][ T8498] ? clear_bhb_loop+0x60/0xb0 [ 205.786328][ T8498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.786344][ T8498] RIP: 0033:0x7f5c8e58ebe9 [ 205.786359][ T8498] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 205.786371][ T8498] RSP: 002b:00007f5c8f455038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 205.786389][ T8498] RAX: ffffffffffffffda RBX: 00007f5c8e7c5fa0 RCX: 00007f5c8e58ebe9 [ 205.786401][ T8498] RDX: 0000200000000080 RSI: 00000000800448d4 RDI: 0000000000000004 [ 205.786412][ T8498] RBP: 00007f5c8f455090 R08: 0000000000000000 R09: 0000000000000000 [ 205.786423][ T8498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 205.786432][ T8498] R13: 00007f5c8e7c6038 R14: 00007f5c8e7c5fa0 R15: 00007fff1f920058 [ 205.786461][ T8498] [ 205.814681][ T8500] netlink: 20 bytes leftover after parsing attributes in process `syz.1.690'. [ 206.061031][ T8500] netlink: 12 bytes leftover after parsing attributes in process `syz.1.690'. [ 206.100072][ T8479] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.157011][ T8509] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 206.176954][ T8509] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 206.226501][ T8479] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.280685][ T8519] netlink: 'syz.4.695': attribute type 10 has an invalid length. [ 206.301749][ T8519] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 206.383019][ T1147] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.408970][ T1321] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.431347][ T1321] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.448656][ T8524] FAULT_INJECTION: forcing a failure. [ 206.448656][ T8524] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 206.476502][ T1147] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.487113][ T8524] CPU: 1 UID: 0 PID: 8524 Comm: syz.1.697 Not tainted syzkaller #0 PREEMPT(full) [ 206.487143][ T8524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 206.487153][ T8524] Call Trace: [ 206.487160][ T8524] [ 206.487168][ T8524] dump_stack_lvl+0x189/0x250 [ 206.487192][ T8524] ? __pfx____ratelimit+0x10/0x10 [ 206.487210][ T8524] ? __pfx_dump_stack_lvl+0x10/0x10 [ 206.487228][ T8524] ? __pfx__printk+0x10/0x10 [ 206.487263][ T8524] should_fail_ex+0x414/0x560 [ 206.487297][ T8524] _copy_from_user+0x2d/0xb0 [ 206.487317][ T8524] __copy_msghdr+0x3c5/0x5b0 [ 206.487340][ T8524] ___sys_sendmsg+0x1a5/0x2a0 [ 206.487361][ T8524] ? __pfx____sys_sendmsg+0x10/0x10 [ 206.487414][ T8524] ? __fget_files+0x2a/0x420 [ 206.487430][ T8524] ? __fget_files+0x3a0/0x420 [ 206.487455][ T8524] __sys_sendmmsg+0x227/0x430 [ 206.487479][ T8524] ? __pfx___sys_sendmmsg+0x10/0x10 [ 206.487495][ T8524] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 206.487537][ T8524] ? ksys_write+0x22a/0x250 [ 206.487561][ T8524] ? __pfx_ksys_write+0x10/0x10 [ 206.487578][ T8524] ? rcu_is_watching+0x15/0xb0 [ 206.487601][ T8524] __x64_sys_sendmmsg+0xa0/0xc0 [ 206.487622][ T8524] do_syscall_64+0xfa/0x3b0 [ 206.487638][ T8524] ? lockdep_hardirqs_on+0x9c/0x150 [ 206.487654][ T8524] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.487670][ T8524] ? clear_bhb_loop+0x60/0xb0 [ 206.487690][ T8524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.487706][ T8524] RIP: 0033:0x7f6a38f8ebe9 [ 206.487721][ T8524] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 206.487733][ T8524] RSP: 002b:00007f6a39e66038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 206.487752][ T8524] RAX: ffffffffffffffda RBX: 00007f6a391c5fa0 RCX: 00007f6a38f8ebe9 [ 206.487764][ T8524] RDX: 0000000000000001 RSI: 0000200000000d80 RDI: 0000000000000003 [ 206.487774][ T8524] RBP: 00007f6a39e66090 R08: 0000000000000000 R09: 0000000000000000 [ 206.487784][ T8524] R10: 0000000000008004 R11: 0000000000000246 R12: 0000000000000001 [ 206.487794][ T8524] R13: 00007f6a391c6038 R14: 00007f6a391c5fa0 R15: 00007ffda5850428 [ 206.487822][ T8524] [ 206.489067][ T8522] netlink: 'syz.2.696': attribute type 12 has an invalid length. [ 206.725109][ T8525] netlink: 12 bytes leftover after parsing attributes in process `syz.2.696'. [ 206.951013][ T8545] bond1: option mode: unable to set because the bond device is up [ 207.028457][ T8548] netlink: 8 bytes leftover after parsing attributes in process `syz.1.705'. [ 207.037973][ T8548] netlink: 12 bytes leftover after parsing attributes in process `syz.1.705'. [ 207.071804][ T8550] bond0: (slave batadv_slave_0): Releasing backup interface [ 207.125985][ T8550] netlink: 24 bytes leftover after parsing attributes in process `syz.4.706'. [ 207.141657][ T8545] 8021q: adding VLAN 0 to HW filter on device macvlan6 [ 207.152818][ T8545] bond1: (slave macvlan6): Enslaving as a backup interface with a down link [ 207.184729][ T8552] bond1: (slave macvlan6): Releasing backup interface [ 207.241653][ T8560] openvswitch: netlink: IP tunnel dst address not specified [ 207.253760][ T8550] team0: Mode changed to "loadbalance" [ 207.298774][ T8555] can: request_module (can-proto-0) failed. [ 207.389922][ T8566] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 207.401401][ T8568] FAULT_INJECTION: forcing a failure. [ 207.401401][ T8568] name failslab, interval 1, probability 0, space 0, times 0 [ 207.415691][ T8568] CPU: 0 UID: 0 PID: 8568 Comm: syz.2.710 Not tainted syzkaller #0 PREEMPT(full) [ 207.415713][ T8568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 207.415723][ T8568] Call Trace: [ 207.415730][ T8568] [ 207.415737][ T8568] dump_stack_lvl+0x189/0x250 [ 207.415761][ T8568] ? __pfx____ratelimit+0x10/0x10 [ 207.415779][ T8568] ? __pfx_dump_stack_lvl+0x10/0x10 [ 207.415798][ T8568] ? __pfx__printk+0x10/0x10 [ 207.415822][ T8568] ? __pfx___might_resched+0x10/0x10 [ 207.415839][ T8568] ? fs_reclaim_acquire+0x7d/0x100 [ 207.415867][ T8568] should_fail_ex+0x414/0x560 [ 207.415893][ T8568] should_failslab+0xa8/0x100 [ 207.415917][ T8568] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 207.415937][ T8568] ? __rt6_find_exception_rcu+0x127/0x4c0 [ 207.415953][ T8568] ? __alloc_skb+0x112/0x2d0 [ 207.415975][ T8568] __alloc_skb+0x112/0x2d0 [ 207.415997][ T8568] alloc_skb_with_frags+0xca/0x890 [ 207.416017][ T8568] ? __lock_acquire+0xab9/0xd20 [ 207.416049][ T8568] sock_alloc_send_pskb+0x857/0x990 [ 207.416090][ T8568] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 207.416108][ T8568] ? ipv6_get_saddr_eval+0xb85/0xee0 [ 207.416138][ T8568] ? ipv6_dev_get_saddr+0x143/0xb70 [ 207.416159][ T8568] __ip6_append_data+0x2b43/0x3f30 [ 207.416181][ T8568] ? __lock_acquire+0xab9/0xd20 [ 207.416225][ T8568] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 207.416266][ T8568] ? __pfx___ip6_append_data+0x10/0x10 [ 207.416285][ T8568] ? __pfx_ip6_mtu+0x10/0x10 [ 207.416317][ T8568] ip6_append_data+0x1c4/0x380 [ 207.416344][ T8568] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 207.416367][ T8568] l2tp_ip6_sendmsg+0x1286/0x17c0 [ 207.416402][ T8568] ? __pfx_l2tp_ip6_sendmsg+0x10/0x10 [ 207.416443][ T8568] ? __pfx_aa_sk_perm+0x10/0x10 [ 207.416472][ T8568] ? tomoyo_socket_sendmsg_permission+0x216/0x300 [ 207.416499][ T8568] ? inet_sendmsg+0x2f4/0x370 [ 207.416519][ T8568] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 207.416541][ T8568] __sock_sendmsg+0x19c/0x270 [ 207.416566][ T8568] ____sys_sendmsg+0x52d/0x830 [ 207.416590][ T8568] ? __pfx_____sys_sendmsg+0x10/0x10 [ 207.416619][ T8568] ? import_iovec+0x74/0xa0 [ 207.416642][ T8568] ___sys_sendmsg+0x21f/0x2a0 [ 207.416664][ T8568] ? __pfx____sys_sendmsg+0x10/0x10 [ 207.416721][ T8568] ? __fget_files+0x2a/0x420 [ 207.416735][ T8568] ? __fget_files+0x3a0/0x420 [ 207.416761][ T8568] __sys_sendmmsg+0x227/0x430 [ 207.416786][ T8568] ? __pfx___sys_sendmmsg+0x10/0x10 [ 207.416802][ T8568] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 207.416849][ T8568] ? ksys_write+0x22a/0x250 [ 207.416872][ T8568] ? __pfx_ksys_write+0x10/0x10 [ 207.416890][ T8568] ? rcu_is_watching+0x15/0xb0 [ 207.416915][ T8568] __x64_sys_sendmmsg+0xa0/0xc0 [ 207.416935][ T8568] do_syscall_64+0xfa/0x3b0 [ 207.416952][ T8568] ? lockdep_hardirqs_on+0x9c/0x150 [ 207.416969][ T8568] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.416985][ T8568] ? clear_bhb_loop+0x60/0xb0 [ 207.417005][ T8568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.417021][ T8568] RIP: 0033:0x7f5c8e58ebe9 [ 207.417036][ T8568] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 207.417049][ T8568] RSP: 002b:00007f5c8f455038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 207.417068][ T8568] RAX: ffffffffffffffda RBX: 00007f5c8e7c5fa0 RCX: 00007f5c8e58ebe9 [ 207.417081][ T8568] RDX: 0000000000000001 RSI: 0000200000000d80 RDI: 0000000000000003 [ 207.417091][ T8568] RBP: 00007f5c8f455090 R08: 0000000000000000 R09: 0000000000000000 [ 207.417102][ T8568] R10: 0000000000008004 R11: 0000000000000246 R12: 0000000000000001 [ 207.417112][ T8568] R13: 00007f5c8e7c6038 R14: 00007f5c8e7c5fa0 R15: 00007fff1f920058 [ 207.417142][ T8568] [ 207.792954][ T8566] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 207.858419][ T8575] tipc: New replicast peer: 255.255.255.254 [ 207.865550][ T8575] tipc: Enabled bearer , priority 10 [ 207.871754][ T8579] netlink: 'syz.1.715': attribute type 29 has an invalid length. [ 207.901374][ T8578] netlink: 8 bytes leftover after parsing attributes in process `syz.3.713'. [ 207.914969][ T8579] netlink: 'syz.1.715': attribute type 29 has an invalid length. [ 207.929264][ T8581] netlink: 'syz.2.716': attribute type 1 has an invalid length. [ 207.939008][ T8581] netlink: 228 bytes leftover after parsing attributes in process `syz.2.716'. [ 207.957218][ T8579] netlink: 500 bytes leftover after parsing attributes in process `syz.1.715'. [ 208.128819][ T8592] lo speed is unknown, defaulting to 1000 [ 208.169145][ T8594] netlink: 'syz.4.720': attribute type 12 has an invalid length. [ 208.463944][ T8608] FAULT_INJECTION: forcing a failure. [ 208.463944][ T8608] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 208.488506][ T8608] CPU: 1 UID: 0 PID: 8608 Comm: syz.1.724 Not tainted syzkaller #0 PREEMPT(full) [ 208.488528][ T8608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 208.488538][ T8608] Call Trace: [ 208.488545][ T8608] [ 208.488553][ T8608] dump_stack_lvl+0x189/0x250 [ 208.488577][ T8608] ? __pfx____ratelimit+0x10/0x10 [ 208.488595][ T8608] ? __pfx_dump_stack_lvl+0x10/0x10 [ 208.488614][ T8608] ? __pfx__printk+0x10/0x10 [ 208.488635][ T8608] ? __might_fault+0xb0/0x130 [ 208.488669][ T8608] should_fail_ex+0x414/0x560 [ 208.488695][ T8608] _copy_from_user+0x2d/0xb0 [ 208.488715][ T8608] kstrtouint_from_user+0xc4/0x170 [ 208.488741][ T8608] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 208.488783][ T8608] proc_fail_nth_write+0x88/0x200 [ 208.488802][ T8608] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 208.488827][ T8608] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 208.488847][ T8608] vfs_write+0x27e/0xb30 [ 208.488878][ T8608] ? __pfx_vfs_write+0x10/0x10 [ 208.488900][ T8608] ? __fget_files+0x2a/0x420 [ 208.488921][ T8608] ? __fget_files+0x3a0/0x420 [ 208.488935][ T8608] ? __fget_files+0x2a/0x420 [ 208.488960][ T8608] ksys_write+0x145/0x250 [ 208.488983][ T8608] ? __pfx_ksys_write+0x10/0x10 [ 208.489000][ T8608] ? rcu_is_watching+0x15/0xb0 [ 208.489023][ T8608] ? do_syscall_64+0xbe/0x3b0 [ 208.489045][ T8608] do_syscall_64+0xfa/0x3b0 [ 208.489061][ T8608] ? lockdep_hardirqs_on+0x9c/0x150 [ 208.489077][ T8608] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.489093][ T8608] ? clear_bhb_loop+0x60/0xb0 [ 208.489114][ T8608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.489130][ T8608] RIP: 0033:0x7f6a38f8d69f [ 208.489145][ T8608] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 208.489159][ T8608] RSP: 002b:00007f6a39e66030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 208.489178][ T8608] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6a38f8d69f [ 208.489190][ T8608] RDX: 0000000000000001 RSI: 00007f6a39e660a0 RDI: 0000000000000004 [ 208.489200][ T8608] RBP: 00007f6a39e66090 R08: 0000000000000000 R09: 0000000000000000 [ 208.489210][ T8608] R10: 0000000000008004 R11: 0000000000000293 R12: 0000000000000001 [ 208.489220][ T8608] R13: 00007f6a391c6038 R14: 00007f6a391c5fa0 R15: 00007ffda5850428 [ 208.489250][ T8608] [ 208.892735][ T5977] tipc: Node number set to 1541963800 [ 209.069286][ T8631] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 209.220498][ T8634] team0: Unable to change to the same mode the team is in [ 209.354173][ T8640] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.403187][ T8645] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.461640][ T8640] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.546805][ T8645] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.685459][ T8640] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.718183][ T8645] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.769540][ T8640] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.813014][ T8645] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.973419][ T6984] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.057346][ T6984] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.069080][ T8655] workqueue: name exceeds WQ_NAME_LEN. Truncating to: žÀ^–>º>ùMv^µâ侦¸ÑKc'A¥»– [ 210.083246][ T6984] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.166502][ T6984] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.357285][ T8663] xt_policy: neither incoming nor outgoing policy selected [ 210.649271][ T8673] __nla_validate_parse: 6 callbacks suppressed [ 210.649287][ T8673] netlink: 24 bytes leftover after parsing attributes in process `syz.1.747'. [ 210.670330][ T8673] team0: Unable to change to the same mode the team is in [ 210.896310][ T8681] netlink: 44 bytes leftover after parsing attributes in process `syz.2.750'. [ 210.942722][ T8681] netlink: 'syz.2.750': attribute type 13 has an invalid length. [ 210.950467][ T8681] netlink: 'syz.2.750': attribute type 17 has an invalid length. [ 211.069664][ T8681] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 211.088753][ T5947] lo speed is unknown, defaulting to 1000 [ 211.124134][ T8687] lo speed is unknown, defaulting to 1000 [ 211.610247][ T6984] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.652619][ T6984] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.691312][ T13] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.719638][ T13] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.828200][ T8698] netlink: 48 bytes leftover after parsing attributes in process `syz.3.755'. [ 211.987954][ T8704] bond2: option mode: unable to set because the bond device is up [ 212.023266][ T8700] netlink: 'syz.2.756': attribute type 12 has an invalid length. [ 212.033858][ T8700] netlink: 8 bytes leftover after parsing attributes in process `syz.2.756'. [ 212.069937][ T8704] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 212.080592][ T8704] bond2: (slave macvlan3): Enslaving as a backup interface with a down link [ 212.152457][ T8704] bond3: (slave bond4): Releasing backup interface [ 212.206006][ T8704] bond2: (slave macvlan3): Releasing backup interface [ 212.708620][ T8722] netlink: 132 bytes leftover after parsing attributes in process `syz.3.765'. [ 213.094345][ T8736] bond2: option mode: unable to set because the bond device is up [ 213.167433][ T8736] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 213.176779][ T8736] bond2: (slave macvlan4): Enslaving as a backup interface with a down link [ 213.221401][ T8736] bond2: (slave macvlan4): Releasing backup interface [ 213.462774][ T8745] netlink: 40 bytes leftover after parsing attributes in process `syz.3.773'. [ 213.476950][ T8745] tc_dump_action: action bad kind [ 213.869737][ T8754] netlink: 132 bytes leftover after parsing attributes in process `syz.3.776'. [ 214.233216][ T8763] netlink: 104 bytes leftover after parsing attributes in process `syz.3.777'. [ 214.342957][ T8768] netlink: 'syz.3.778': attribute type 1 has an invalid length. [ 214.350621][ T8768] netlink: 180 bytes leftover after parsing attributes in process `syz.3.778'. [ 214.364009][ T8769] netlink: 'syz.3.778': attribute type 1 has an invalid length. [ 214.371654][ T8769] netlink: 180 bytes leftover after parsing attributes in process `syz.3.778'. [ 214.559672][ T8643] Set syz1 is full, maxelem 65536 reached [ 214.647663][ T8779] openvswitch: netlink: IP tunnel dst address not specified [ 215.791254][ T8818] netlink: 'syz.3.794': attribute type 12 has an invalid length. [ 216.466546][ T8840] netlink: 'syz.2.802': attribute type 22 has an invalid length. [ 216.474943][ T8840] __nla_validate_parse: 1 callbacks suppressed [ 216.474956][ T8840] netlink: 4 bytes leftover after parsing attributes in process `syz.2.802'. [ 216.500893][ T8840] netlink: 'syz.2.802': attribute type 22 has an invalid length. [ 216.508819][ T8840] netlink: 4 bytes leftover after parsing attributes in process `syz.2.802'. [ 216.522335][ T1321] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.532389][ T1321] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.545294][ T1321] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.555189][ T1321] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.720870][ T8849] team0: Failed to send options change via netlink (err -105) [ 216.767399][ T8849] team0: Failed to send options change via netlink (err -105) [ 216.788809][ T8849] team0: Mode changed to "activebackup" [ 216.863790][ T8851] sctp: [Deprecated]: syz.3.806 (pid 8851) Use of int in max_burst socket option deprecated. [ 216.863790][ T8851] Use struct sctp_assoc_value instead [ 217.097200][ T8859] netlink: 96 bytes leftover after parsing attributes in process `syz.3.810'. [ 217.260629][ T8866] netlink: 'syz.3.813': attribute type 1 has an invalid length. [ 217.334458][ T8872] 8021q: VLANs not supported on ip_vti0 [ 217.414936][ T8879] netlink: 16 bytes leftover after parsing attributes in process `syz.3.816'. [ 217.434951][ T8879] netlink: 216 bytes leftover after parsing attributes in process `syz.3.816'. [ 217.635981][ T8887] netlink: 12 bytes leftover after parsing attributes in process `syz.0.817'. [ 217.873793][ T8898] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 217.903663][ T8898] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 218.069396][ T8658] Set syz1 is full, maxelem 65536 reached [ 218.159809][ T8908] netlink: 'syz.1.824': attribute type 1 has an invalid length. [ 218.224060][ T8908] bond3: (slave bridge2): making interface the new active one [ 218.231792][ T8917] netlink: 'syz.4.826': attribute type 16 has an invalid length. [ 218.234715][ T8908] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 218.239735][ T8917] netlink: 20 bytes leftover after parsing attributes in process `syz.4.826'. [ 218.481137][ T8936] netlink: 24 bytes leftover after parsing attributes in process `syz.1.832'. [ 218.509838][ T8936] netlink: 12 bytes leftover after parsing attributes in process `syz.1.832'. [ 218.522823][ T8936] netlink: 4 bytes leftover after parsing attributes in process `syz.1.832'. [ 218.694121][ T8952] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 218.701576][ T8952] IPv6: NLM_F_CREATE should be set when creating new route [ 218.708799][ T8952] IPv6: NLM_F_CREATE should be set when creating new route [ 218.815939][ T8956] bond1: option mode: unable to set because the bond device is up [ 218.885308][ T8956] 8021q: adding VLAN 0 to HW filter on device macvlan7 [ 218.895131][ T8956] bond1: (slave macvlan7): Enslaving as a backup interface with a down link [ 218.925014][ T8956] bond3: (slave bridge2): Releasing active interface [ 218.938939][ T8956] bond1: (slave macvlan7): Releasing backup interface [ 219.140405][ T8969] tipc: Enabled bearer , priority 0 [ 219.158237][ T8969] syzkaller0: entered promiscuous mode [ 219.171327][ T8969] syzkaller0: entered allmulticast mode [ 219.229999][ T8969] tipc: Resetting bearer [ 219.245979][ T8968] tipc: Resetting bearer [ 219.273138][ T8968] tipc: Disabling bearer [ 219.306027][ T8975] lo speed is unknown, defaulting to 1000 [ 219.589653][ T8989] bond1: option mode: unable to set because the bond device is up [ 219.659640][ T8989] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 219.698457][ T8989] bond1: (slave macvlan5): Enslaving as a backup interface with a down link [ 219.873040][ T8989] bond1: (slave macvlan5): Releasing backup interface [ 219.881210][ T9008] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 219.990359][ T9005] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 220.028232][ T9005] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 220.191550][ T9026] ieee802154 phy0 wpan0: encryption failed: -90 [ 220.221539][ T9029] Set syz1 is full, maxelem 65536 reached [ 220.234715][ T9026] IPVS: stopping backup sync thread 9030 ... [ 220.241244][ T9030] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0 [ 220.379864][ T9038] tipc: Enabled bearer , priority 0 [ 220.388879][ T9038] syzkaller0: entered promiscuous mode [ 220.412160][ T9038] syzkaller0: entered allmulticast mode [ 220.461742][ T9038] tipc: Resetting bearer [ 220.467871][ T9036] sctp: [Deprecated]: syz.0.866 (pid 9036) Use of int in max_burst socket option deprecated. [ 220.467871][ T9036] Use struct sctp_assoc_value instead [ 220.506882][ T9035] tipc: Resetting bearer [ 220.545783][ T9035] tipc: Disabling bearer [ 220.558273][ T9046] netlink: 'syz.2.869': attribute type 10 has an invalid length. [ 220.579184][ T9046] team0: Device hsr_slave_0 failed to register rx_handler [ 220.962146][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 221.073327][ T9072] IPVS: Scheduler module ip_vs_ not found [ 221.124781][ T9074] macvtap1: entered allmulticast mode [ 221.155303][ T9074] veth0_macvtap: entered allmulticast mode [ 221.317167][ T9080] ip6tnl1: entered allmulticast mode [ 221.333290][ T9086] vlan1: entered allmulticast mode [ 221.340269][ T9086] veth0_vlan: entered allmulticast mode [ 221.347286][ T9086] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 221.370815][ T9088] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 221.609126][ T9100] tipc: Enabling of bearer rejected, failed to enable media [ 221.845272][ T9111] __nla_validate_parse: 11 callbacks suppressed [ 221.845288][ T9111] netlink: 24 bytes leftover after parsing attributes in process `syz.0.892'. [ 222.198756][ T9138] lo speed is unknown, defaulting to 1000 [ 222.222281][ T9142] netlink: 3752 bytes leftover after parsing attributes in process `syz.1.901'. [ 222.576161][ T9156] netlink: 5 bytes leftover after parsing attributes in process `syz.1.908'. [ 223.408602][ T9199] syzkaller1: entered promiscuous mode [ 223.425000][ T9199] syzkaller1: entered allmulticast mode [ 223.570033][ T9204] tipc: Enabled bearer , priority 0 [ 223.598575][ T9204] syzkaller0: entered promiscuous mode [ 223.604478][ T9211] netlink: 8 bytes leftover after parsing attributes in process `syz.1.923'. [ 223.610812][ T9204] syzkaller0: entered allmulticast mode [ 223.672334][ T9204] tipc: Resetting bearer [ 223.691648][ T9217] netlink: 4 bytes leftover after parsing attributes in process `syz.3.926'. [ 223.701488][ T9202] tipc: Resetting bearer [ 223.720231][ T9202] tipc: Disabling bearer [ 223.745972][ T9220] netlink: 'syz.3.926': attribute type 13 has an invalid length. [ 223.748803][ T9217] bridge0: entered promiscuous mode [ 223.767087][ T9217] macvtap2: entered promiscuous mode [ 223.776302][ T9217] macvtap2: entered allmulticast mode [ 223.781761][ T9217] bridge0: entered allmulticast mode [ 223.796651][ T9219] tipc: Enabling of bearer rejected, failed to enable media [ 223.796844][ T9222] netlink: 'syz.4.929': attribute type 15 has an invalid length. [ 223.805873][ T9220] macvtap2: left promiscuous mode [ 223.826405][ T9220] macvtap2: left allmulticast mode [ 223.827855][ T9222] netlink: 24 bytes leftover after parsing attributes in process `syz.4.929'. [ 223.831584][ T9220] bridge0: left allmulticast mode [ 223.850593][ T9220] macvtap2: refused to change device tx_queue_len [ 223.858647][ T9219] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 223.869276][ T9224] netlink: 360 bytes leftover after parsing attributes in process `syz.0.930'. [ 223.968136][ T9226] netlink: 8 bytes leftover after parsing attributes in process `syz.4.931'. [ 224.227188][ T9247] netlink: 'syz.4.939': attribute type 3 has an invalid length. [ 224.235433][ T9248] netlink: 24 bytes leftover after parsing attributes in process `syz.3.940'. [ 224.276317][ T9247] netlink: 'syz.4.939': attribute type 1 has an invalid length. [ 224.285192][ T9247] netlink: 192 bytes leftover after parsing attributes in process `syz.4.939'. [ 224.303967][ T9247] NCSI netlink: No device for ifindex 0 [ 224.771253][ T9261] lo speed is unknown, defaulting to 1000 [ 225.163157][ T9278] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 225.778012][ T9326] team0: Unable to change to the same mode the team is in [ 226.158430][ T9346] lo speed is unknown, defaulting to 1000 [ 226.272339][ T9351] lo speed is unknown, defaulting to 1000 [ 226.346171][ T9360] netlink: 'syz.2.973': attribute type 10 has an invalid length. [ 226.389685][ T9360] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 226.402374][ T9360] bond0: (slave lo): refused to change device type [ 226.467400][ T5947] lo speed is unknown, defaulting to 1000 [ 226.475721][ T5947] syz2: Port: 1 Link DOWN [ 226.624583][ T9373] macvtap3: entered promiscuous mode [ 226.629906][ T9373] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 226.881501][ T9382] __nla_validate_parse: 7 callbacks suppressed [ 226.881517][ T9382] netlink: 24 bytes leftover after parsing attributes in process `syz.4.978'. [ 226.905170][ T9382] team0: Unable to change to the same mode the team is in [ 226.917561][ T9385] netlink: 40 bytes leftover after parsing attributes in process `syz.0.980'. [ 227.047608][ T9355] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 227.053793][ T9394] bond1: option mode: unable to set because the bond device is up [ 227.119361][ T9394] 8021q: adding VLAN 0 to HW filter on device macvlan8 [ 227.209639][ T9394] bond1: (slave macvlan8): Enslaving as a backup interface with a down link [ 227.223593][ T9404] netlink: 8 bytes leftover after parsing attributes in process `syz.4.986'. [ 227.249405][ T9404] netlink: 8 bytes leftover after parsing attributes in process `syz.4.986'. [ 227.259152][ T9404] netlink: 8 bytes leftover after parsing attributes in process `syz.4.986'. [ 227.269394][ T9398] bond1: (slave macvlan8): Releasing backup interface [ 227.435005][ T9399] block nbd1: server does not support multiple connections per device. [ 227.480858][ T9399] block nbd1: shutting down sockets [ 227.676791][ T9422] netlink: 248 bytes leftover after parsing attributes in process `syz.4.990'. [ 227.789306][ T9433] netlink: 68 bytes leftover after parsing attributes in process `syz.3.993'. [ 227.899874][ T9435] netlink: 4 bytes leftover after parsing attributes in process `syz.1.994'. [ 227.945823][ T9435] netlink: 4 bytes leftover after parsing attributes in process `syz.1.994'. [ 228.042062][ T9446] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 228.060681][ T9446] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 228.252071][ T5869] Bluetooth: hci3: command 0x0406 tx timeout [ 228.459897][ T9470] bond1: option mode: unable to set because the bond device is up [ 228.526474][ T9471] bond1: option mode: unable to set because the bond device is up [ 228.586863][ T9470] 8021q: adding VLAN 0 to HW filter on device macvlan6 [ 228.639372][ T9470] bond1: (slave macvlan6): Enslaving as a backup interface with a down link [ 228.736268][ T9471] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 228.745866][ T9471] bond1: (slave macvlan5): Enslaving as a backup interface with a down link [ 228.795178][ T9478] bond1: (slave macvlan6): Releasing backup interface [ 228.856246][ T9477] bond1: (slave macvlan5): Releasing backup interface [ 228.890551][ T9493] netlink: 'syz.1.1005': attribute type 3 has an invalid length. [ 229.300548][ T9514] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1012'. [ 229.497189][ T9524] bond1: option mode: unable to set because the bond device is up [ 229.522639][ T9523] lo speed is unknown, defaulting to 1000 [ 229.573215][ T9524] 8021q: adding VLAN 0 to HW filter on device macvlan9 [ 229.585090][ T9524] bond1: (slave macvlan9): Enslaving as a backup interface with a down link [ 229.640637][ T9524] bond1: (slave macvlan9): Releasing backup interface [ 230.190290][ T9567] netlink: 'syz.1.1028': attribute type 12 has an invalid length. [ 230.356652][ T9586] syzkaller0: entered promiscuous mode [ 230.372662][ T9586] syzkaller0: entered allmulticast mode [ 230.389595][ T9586] IPVS: set_ctl: invalid protocol: 1 172.30.0.3:20001 [ 231.100834][ T9602] netlink: 'syz.0.1039': attribute type 10 has an invalid length. [ 231.127035][ T9602] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.142222][ T9602] team0: entered promiscuous mode [ 231.186972][ T9602] bond0: (slave team0): Enslaving as an active interface with an up link [ 231.252507][ T9612] netlink: 'syz.2.1041': attribute type 12 has an invalid length. [ 231.466879][ T9627] bond0: (slave team0): Releasing backup interface [ 231.528594][ T9627] team0: left promiscuous mode [ 231.614324][ T9630] team0: Unable to change to the same mode the team is in [ 232.120831][ T9656] tipc: Enabled bearer , priority 0 [ 232.129488][ T9656] syzkaller0: entered promiscuous mode [ 232.135068][ T9656] syzkaller0: entered allmulticast mode [ 232.198508][ T9656] tipc: Resetting bearer [ 232.242277][ T9653] tipc: Resetting bearer [ 232.405991][ T9653] tipc: Disabling bearer [ 232.595523][ T9674] __nla_validate_parse: 4 callbacks suppressed [ 232.595540][ T9674] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1061'. [ 232.620834][ T9674] team0: Mode changed to "loadbalance" [ 232.811255][ T9680] netlink: 'syz.1.1072': attribute type 12 has an invalid length. [ 233.234845][ T9706] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1070'. [ 233.285950][ T9706] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1070'. [ 233.286127][ T9710] syz_tun: entered allmulticast mode [ 233.533393][ T9715] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 233.574980][ T9715] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1074'. [ 233.800391][ T9728] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1077'. [ 234.000628][ T9710] batadv_slave_0: left promiscuous mode [ 234.301809][ T9710] vlan2: left promiscuous mode [ 234.312699][ T9710] bond0: left promiscuous mode [ 234.362048][ T9731] bond1: option mode: unable to set because the bond device is up [ 234.396259][ T9732] 8021q: adding VLAN 0 to HW filter on device macvlan10 [ 234.404542][ T9721] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 234.414468][ T9732] bond1: (slave macvlan10): Enslaving as a backup interface with a down link [ 234.465300][ T9733] bond1: (slave macvlan10): Releasing backup interface [ 234.514355][ T1053] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.546650][ T1053] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.567428][ T1053] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.586570][ T9713] lo speed is unknown, defaulting to 1000 [ 234.596596][ T1053] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.911454][ T9752] netlink: 'syz.0.1086': attribute type 12 has an invalid length. [ 235.678787][ T9803] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1101'. [ 235.719553][ T9806] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1104'. [ 235.728864][ T9806] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1104'. [ 235.745482][ T9806] ip6tnl1: entered promiscuous mode [ 235.751024][ T9806] ip6tnl1: entered allmulticast mode [ 235.844349][ T9809] tap0: tun_chr_ioctl cmd 1074025677 [ 235.850535][ T9809] tap0: linktype set to 0 [ 235.958029][ T9817] sysfs: cannot create duplicate filename '/class/ieee80211/žÀ^–>º>ùMv^µâ侦¸ÑKc'A¥»–_à›xDä±pj8¼•TTí!' [ 235.975174][ T9817] CPU: 1 UID: 0 PID: 9817 Comm: syz.0.1108 Not tainted syzkaller #0 PREEMPT(full) [ 235.975198][ T9817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 235.975208][ T9817] Call Trace: [ 235.975217][ T9817] [ 235.975225][ T9817] dump_stack_lvl+0x189/0x250 [ 235.975256][ T9817] ? __pfx_dump_stack_lvl+0x10/0x10 [ 235.975278][ T9817] ? __pfx__printk+0x10/0x10 [ 235.975308][ T9817] ? kernfs_path_from_node+0x2f/0x290 [ 235.975328][ T9817] ? kernfs_path_from_node+0x250/0x290 [ 235.975345][ T9817] ? kernfs_path_from_node+0x2f/0x290 [ 235.975368][ T9817] sysfs_warn_dup+0x8e/0xa0 [ 235.975386][ T9817] sysfs_do_create_link_sd+0xc0/0x110 [ 235.975408][ T9817] device_add_class_symlinks+0x1cf/0x240 [ 235.975432][ T9817] device_add+0x475/0xb50 [ 235.975456][ T9817] wiphy_register+0x1ba6/0x28d0 [ 235.975494][ T9817] ? __pfx_wiphy_register+0x10/0x10 [ 235.975512][ T9817] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 235.975543][ T9817] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 235.975571][ T9817] ieee80211_register_hw+0x3425/0x4080 [ 235.975613][ T9817] ? ieee80211_register_hw+0x14e1/0x4080 [ 235.975641][ T9817] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 235.975666][ T9817] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 235.975698][ T9817] ? __hrtimer_setup+0x187/0x210 [ 235.975714][ T9817] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 235.975742][ T9817] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 235.975804][ T9817] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 235.975825][ T9817] ? trace_kmalloc+0x1f/0xd0 [ 235.975844][ T9817] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 235.975867][ T9817] ? kstrndup+0xbf/0x160 [ 235.975897][ T9817] hwsim_new_radio_nl+0xea4/0x1b10 [ 235.975922][ T9817] ? __pfx___nla_validate_parse+0x10/0x10 [ 235.975971][ T9817] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 235.976008][ T9817] ? __nla_parse+0x40/0x60 [ 235.976038][ T9817] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 235.976071][ T9817] genl_family_rcv_msg_doit+0x212/0x300 [ 235.976102][ T9817] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 235.976139][ T9817] ? bpf_lsm_capable+0x9/0x20 [ 235.976160][ T9817] ? security_capable+0x7e/0x2e0 [ 235.976192][ T9817] genl_rcv_msg+0x60e/0x790 [ 235.976221][ T9817] ? __pfx_genl_rcv_msg+0x10/0x10 [ 235.976242][ T9817] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 235.976281][ T9817] netlink_rcv_skb+0x205/0x470 [ 235.976297][ T9817] ? __lock_acquire+0xab9/0xd20 [ 235.976321][ T9817] ? __pfx_genl_rcv_msg+0x10/0x10 [ 235.976344][ T9817] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 235.976384][ T9817] ? down_read+0x1ad/0x2e0 [ 235.976406][ T9817] genl_rcv+0x28/0x40 [ 235.976425][ T9817] netlink_unicast+0x82f/0x9e0 [ 235.976460][ T9817] ? __pfx_netlink_unicast+0x10/0x10 [ 235.976487][ T9817] ? netlink_sendmsg+0x642/0xb30 [ 235.976502][ T9817] ? skb_put+0x11b/0x210 [ 235.976526][ T9817] netlink_sendmsg+0x805/0xb30 [ 235.976555][ T9817] ? __pfx_netlink_sendmsg+0x10/0x10 [ 235.976577][ T9817] ? aa_sock_msg_perm+0xf1/0x1d0 [ 235.976597][ T9817] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 235.976615][ T9817] ? __pfx_netlink_sendmsg+0x10/0x10 [ 235.976634][ T9817] __sock_sendmsg+0x219/0x270 [ 235.976662][ T9817] ____sys_sendmsg+0x505/0x830 [ 235.976689][ T9817] ? __pfx_____sys_sendmsg+0x10/0x10 [ 235.976720][ T9817] ? import_iovec+0x74/0xa0 [ 235.976743][ T9817] ___sys_sendmsg+0x21f/0x2a0 [ 235.976765][ T9817] ? __pfx____sys_sendmsg+0x10/0x10 [ 235.976822][ T9817] ? __fget_files+0x2a/0x420 [ 235.976837][ T9817] ? __fget_files+0x3a0/0x420 [ 235.976866][ T9817] __x64_sys_sendmsg+0x19b/0x260 [ 235.976890][ T9817] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 235.976922][ T9817] ? rcu_is_watching+0x15/0xb0 [ 235.976946][ T9817] ? do_syscall_64+0xbe/0x3b0 [ 235.976977][ T9817] do_syscall_64+0xfa/0x3b0 [ 235.976995][ T9817] ? lockdep_hardirqs_on+0x9c/0x150 [ 235.977013][ T9817] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.977031][ T9817] ? clear_bhb_loop+0x60/0xb0 [ 235.977054][ T9817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.977071][ T9817] RIP: 0033:0x7f9c7a18ebe9 [ 235.977088][ T9817] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 235.977103][ T9817] RSP: 002b:00007f9c7af92038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 235.977123][ T9817] RAX: ffffffffffffffda RBX: 00007f9c7a3c5fa0 RCX: 00007f9c7a18ebe9 [ 235.977136][ T9817] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004 [ 235.977148][ T9817] RBP: 00007f9c7a211e19 R08: 0000000000000000 R09: 0000000000000000 [ 235.977159][ T9817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 235.977170][ T9817] R13: 00007f9c7a3c6038 R14: 00007f9c7a3c5fa0 R15: 00007ffe6c6f50a8 [ 235.977204][ T9817] [ 236.542932][ T9827] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1111'. [ 236.624998][ T9817] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1108'. [ 237.171215][ T9868] netlink: 'syz.1.1125': attribute type 4 has an invalid length. [ 237.208542][ T9868] Ã: renamed from bond0 [ 237.411835][ T9886] macvlan1: entered promiscuous mode [ 237.444102][ T9886] ipvlan0: entered promiscuous mode [ 237.471171][ T9886] ipvlan0: left promiscuous mode [ 237.479423][ T9886] macvlan1: left promiscuous mode [ 237.527537][ T9888] macvlan1: entered promiscuous mode [ 237.536548][ T9888] ipvlan0: entered promiscuous mode [ 237.543156][ T9888] ipvlan0: left promiscuous mode [ 237.553894][ T9888] macvlan1: left promiscuous mode [ 237.598651][ T9904] tap0: tun_chr_ioctl cmd 1074025676 [ 237.606328][ T9904] tap0: owner set to 0 [ 237.738501][ T9915] macsec1: entered allmulticast mode [ 237.756188][ T9917] __nla_validate_parse: 6 callbacks suppressed [ 237.756204][ T9917] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1140'. [ 237.778148][ T9915] dummy0: entered allmulticast mode [ 237.789641][ T9915] dummy0: left allmulticast mode [ 238.004843][ T9936] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 238.016090][ T9934] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1145'. [ 238.029306][ T9934] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1145'. [ 238.114566][ T9944] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1148'. [ 238.205839][ T9938] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1144'. [ 238.238614][ T9949] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1149'. [ 238.263638][ T9949] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 238.427788][ T9948] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1149'. [ 238.747225][ T9972] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1155'. [ 238.801863][ T9977] syz.4.1155: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 238.838220][ T9977] CPU: 1 UID: 0 PID: 9977 Comm: syz.4.1155 Not tainted syzkaller #0 PREEMPT(full) [ 238.838247][ T9977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 238.838259][ T9977] Call Trace: [ 238.838266][ T9977] [ 238.838275][ T9977] dump_stack_lvl+0x189/0x250 [ 238.838301][ T9977] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 238.838327][ T9977] ? __pfx_dump_stack_lvl+0x10/0x10 [ 238.838347][ T9977] ? __pfx__printk+0x10/0x10 [ 238.838370][ T9977] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 238.838390][ T9977] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 238.838419][ T9977] warn_alloc+0x214/0x310 [ 238.838443][ T9977] ? stack_depot_save_flags+0x40/0x860 [ 238.838467][ T9977] ? __pfx_warn_alloc+0x10/0x10 [ 238.838492][ T9977] ? kasan_save_track+0x4f/0x80 [ 238.838513][ T9977] ? xskq_create+0x56/0x170 [ 238.838527][ T9977] ? xsk_init_queue+0xb0/0x110 [ 238.838548][ T9977] ? xsk_setsockopt+0x4dc/0x8d0 [ 238.838568][ T9977] ? do_sock_setsockopt+0x17c/0x1b0 [ 238.838583][ T9977] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 238.838599][ T9977] ? do_syscall_64+0xfa/0x3b0 [ 238.838616][ T9977] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.838650][ T9977] __vmalloc_node_range_noprof+0x125/0x12f0 [ 238.838704][ T9977] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 238.838735][ T9977] ? __kasan_kmalloc+0x93/0xb0 [ 238.838760][ T9977] vmalloc_user_noprof+0xad/0xf0 [ 238.838784][ T9977] ? xskq_create+0xbf/0x170 [ 238.838802][ T9977] xskq_create+0xbf/0x170 [ 238.838823][ T9977] xsk_init_queue+0xb0/0x110 [ 238.838846][ T9977] xsk_setsockopt+0x4dc/0x8d0 [ 238.838871][ T9977] ? __pfx_xsk_setsockopt+0x10/0x10 [ 238.838892][ T9977] ? __pfx_aa_sk_perm+0x10/0x10 [ 238.838920][ T9977] ? aa_sock_opt_perm+0xff/0x1b0 [ 238.838941][ T9977] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 238.838961][ T9977] ? __pfx_xsk_setsockopt+0x10/0x10 [ 238.838988][ T9977] do_sock_setsockopt+0x17c/0x1b0 [ 238.839013][ T9977] __x64_sys_setsockopt+0x13f/0x1b0 [ 238.839038][ T9977] do_syscall_64+0xfa/0x3b0 [ 238.839056][ T9977] ? lockdep_hardirqs_on+0x9c/0x150 [ 238.839071][ T9977] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.839088][ T9977] ? clear_bhb_loop+0x60/0xb0 [ 238.839108][ T9977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.839125][ T9977] RIP: 0033:0x7fc563b8ebe9 [ 238.839141][ T9977] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 238.839156][ T9977] RSP: 002b:00007fc56496d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 238.839176][ T9977] RAX: ffffffffffffffda RBX: 00007fc563dc6090 RCX: 00007fc563b8ebe9 [ 238.839191][ T9977] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 238.839202][ T9977] RBP: 00007fc563c11e19 R08: 0000000000000004 R09: 0000000000000000 [ 238.839213][ T9977] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 238.839224][ T9977] R13: 00007fc563dc6128 R14: 00007fc563dc6090 R15: 00007ffd0efdfa08 [ 238.839253][ T9977] [ 238.839271][ T9977] Mem-Info: [ 239.222878][ T9977] active_anon:6651 inactive_anon:0 isolated_anon:0 [ 239.222878][ T9977] active_file:3354 inactive_file:39911 isolated_file:0 [ 239.222878][ T9977] unevictable:768 dirty:114 writeback:0 [ 239.222878][ T9977] slab_reclaimable:12728 slab_unreclaimable:138844 [ 239.222878][ T9977] mapped:33728 shmem:3408 pagetables:1108 [ 239.222878][ T9977] sec_pagetables:0 bounce:0 [ 239.222878][ T9977] kernel_misc_reclaimable:0 [ 239.222878][ T9977] free:1280488 free_pcp:13641 free_cma:0 [ 239.278725][ T9977] Node 0 active_anon:29304kB inactive_anon:0kB active_file:13416kB inactive_file:159444kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:137512kB dirty:456kB writeback:0kB shmem:14896kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12604kB pagetables:4280kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 239.312661][ T9977] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 239.354510][ T9977] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 239.387174][ T9977] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 239.393303][ T9977] Node 0 DMA32 free:1219712kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:29660kB inactive_anon:0kB active_file:13416kB inactive_file:157876kB unevictable:1536kB writepending:456kB present:3129332kB managed:2557416kB mlocked:0kB bounce:0kB free_pcp:33292kB local_pcp:4852kB free_cma:0kB [ 239.432824][ T9977] lowmem_reserve[]: 0 0 1 1 1 [ 239.437724][ T9977] Node 0 Normal free:24kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1568kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 239.468446][ T9977] lowmem_reserve[]: 0 0 0 0 0 [ 239.473548][ T9977] Node 1 Normal free:3886156kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:19204kB local_pcp:9604kB free_cma:0kB [ 239.505195][ T9977] lowmem_reserve[]: 0 0 0 0 0 [ 239.510048][ T9977] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 239.571946][ T9977] Node 0 DMA32: 1390*4kB (UM) 894*8kB (UME) 298*16kB (UME) 223*32kB (UM) 134*64kB (UME) 40*128kB (UME) 12*256kB (UM) 4*512kB (UM) 4*1024kB (UME) 4*2048kB (UM) 284*4096kB (UM) = 1218984kB [ 239.591137][ T9977] Node 0 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB [ 239.604137][ T9977] Node 1 Normal: 189*4kB (UE) 43*8kB (UME) 46*16kB (UME) 83*32kB (UME) 17*64kB (UME) 9*128kB (UME) 4*256kB (UM) 3*512kB (ME) 2*1024kB (UM) 2*2048kB (UE) 945*4096kB (M) = 3886156kB [ 239.625282][ T9977] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 239.642065][ T9977] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 239.656446][ T9977] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 239.666421][ T9977] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 239.677878][ T9977] 48269 total pagecache pages [ 239.682955][ T9977] 0 pages in swap cache [ 239.687122][ T9977] Free swap = 124996kB [ 239.691477][ T9977] Total swap = 124996kB [ 239.695770][ T9977] 2097051 pages RAM [ 239.699572][ T9977] 0 pages HighMem/MovableOnly [ 239.704488][ T9977] 425671 pages reserved [ 239.708647][ T9977] 0 pages cma reserved [ 240.681697][ T9995] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 240.917992][T10010] @ÿ: renamed from veth0_vlan [ 240.928597][T10006] netlink: 'syz.1.1161': attribute type 1 has an invalid length. [ 240.941184][T10006] netlink: 'syz.1.1161': attribute type 1 has an invalid length. [ 240.958699][T10006] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1161'. [ 241.181608][T10026] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 241.227068][T10026] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 241.316815][T10037] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1172'. [ 241.614883][T10055] sctp: [Deprecated]: syz.0.1179 (pid 10055) Use of int in max_burst socket option. [ 241.614883][T10055] Use struct sctp_assoc_value instead [ 241.633108][T10056] geneve2: entered promiscuous mode [ 241.638375][T10056] geneve2: entered allmulticast mode [ 241.815840][T10060] bond0: invalid ARP target 0.0.0.0 specified for addition [ 241.823564][T10060] bond0: option arp_ip_target: invalid value (0) [ 242.128179][T10072] gretap1: entered allmulticast mode [ 242.190310][T10078] lo speed is unknown, defaulting to 1000 [ 242.685754][T10098] bond1: option mode: unable to set because the bond device is up [ 242.895244][T10112] netlink: 'syz.0.1196': attribute type 2 has an invalid length. [ 243.180547][T10125] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 243.236734][T10126] __nla_validate_parse: 4 callbacks suppressed [ 243.236750][T10126] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1200'. [ 243.259607][T10126] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1200'. [ 243.282638][T10126] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1200'. [ 243.311348][T10127] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1200'. [ 243.324788][T10127] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1200'. [ 243.354104][T10127] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1200'. [ 243.482081][T10132] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 243.623056][T10135] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 243.674997][T10134] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 243.817010][T10141] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1205'. [ 243.874674][T10142] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 244.090351][T10149] tap0: tun_chr_ioctl cmd 1074025677 [ 244.098398][T10149] tap0: linktype set to 0 [ 244.212994][T10158] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1212'. [ 244.242731][T10158] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1212'. [ 244.282059][T10160] !: renamed from dummy0 (while UP) [ 244.436141][T10164] tipc: Enabled bearer , priority 0 [ 244.443484][T10164] syzkaller0: entered promiscuous mode [ 244.449051][T10164] syzkaller0: entered allmulticast mode [ 244.453895][T10167] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1215'. [ 244.457500][T10164] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 244.508745][T10161] tipc: Resetting bearer [ 244.562091][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 244.581134][T10161] tipc: Disabling bearer [ 244.750520][T10181] lo speed is unknown, defaulting to 1000 [ 245.099069][T10199] netlink: 'syz.4.1225': attribute type 3 has an invalid length. [ 245.112395][T10199] netlink: 'syz.4.1225': attribute type 3 has an invalid length. [ 245.498095][T10220] netlink: 'syz.2.1231': attribute type 1 has an invalid length. [ 245.860963][T10235] lo speed is unknown, defaulting to 1000 [ 246.504594][T10253] lo speed is unknown, defaulting to 1000 [ 248.053583][T10321] block nbd1: not configured, cannot reconfigure [ 248.101406][T10321] syzkaller1: entered promiscuous mode [ 248.130193][T10321] syzkaller1: entered allmulticast mode [ 248.369866][T10338] bond1: option mode: unable to set because the bond device is up [ 248.423606][T10346] __nla_validate_parse: 5 callbacks suppressed [ 248.423624][T10346] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1266'. [ 248.498724][T10338] 8021q: adding VLAN 0 to HW filter on device macvlan6 [ 248.512915][T10338] bond1: (slave macvlan6): Enslaving as a backup interface with a down link [ 248.558117][T10348] bond1: (slave macvlan6): Releasing backup interface [ 248.608664][T10352] FAULT_INJECTION: forcing a failure. [ 248.608664][T10352] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 248.631167][T10352] CPU: 0 UID: 0 PID: 10352 Comm: syz.0.1268 Not tainted syzkaller #0 PREEMPT(full) [ 248.631191][T10352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 248.631201][T10352] Call Trace: [ 248.631208][T10352] [ 248.631215][T10352] dump_stack_lvl+0x189/0x250 [ 248.631240][T10352] ? __pfx____ratelimit+0x10/0x10 [ 248.631257][T10352] ? __pfx_dump_stack_lvl+0x10/0x10 [ 248.631277][T10352] ? __pfx__printk+0x10/0x10 [ 248.631298][T10352] ? __might_fault+0xb0/0x130 [ 248.631330][T10352] should_fail_ex+0x414/0x560 [ 248.631357][T10352] _copy_from_user+0x2d/0xb0 [ 248.631377][T10352] ___sys_sendmsg+0x158/0x2a0 [ 248.631399][T10352] ? __pfx____sys_sendmsg+0x10/0x10 [ 248.631455][T10352] ? __fget_files+0x2a/0x420 [ 248.631469][T10352] ? __fget_files+0x3a0/0x420 [ 248.631495][T10352] __x64_sys_sendmsg+0x19b/0x260 [ 248.631517][T10352] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 248.631553][T10352] ? __pfx_ksys_write+0x10/0x10 [ 248.631571][T10352] ? rcu_is_watching+0x15/0xb0 [ 248.631593][T10352] ? do_syscall_64+0xbe/0x3b0 [ 248.631615][T10352] do_syscall_64+0xfa/0x3b0 [ 248.631631][T10352] ? lockdep_hardirqs_on+0x9c/0x150 [ 248.631648][T10352] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.631664][T10352] ? clear_bhb_loop+0x60/0xb0 [ 248.631685][T10352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.631701][T10352] RIP: 0033:0x7f9c7a18ebe9 [ 248.631716][T10352] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 248.631730][T10352] RSP: 002b:00007f9c7af92038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 248.631749][T10352] RAX: ffffffffffffffda RBX: 00007f9c7a3c5fa0 RCX: 00007f9c7a18ebe9 [ 248.631762][T10352] RDX: 0000000000000000 RSI: 00002000000038c0 RDI: 0000000000000003 [ 248.631773][T10352] RBP: 00007f9c7af92090 R08: 0000000000000000 R09: 0000000000000000 [ 248.631784][T10352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 248.631793][T10352] R13: 00007f9c7a3c6038 R14: 00007f9c7a3c5fa0 R15: 00007ffe6c6f50a8 [ 248.631820][T10352] [ 248.927939][T10363] trusted_key: syz.1.1271 sent an empty control message without MSG_MORE. [ 249.000319][T10361] netlink: 124 bytes leftover after parsing attributes in process `syz.4.1273'. [ 249.169568][T10380] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 249.196943][T10380] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 249.357568][T10386] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1280'. [ 249.425719][T10392] vlan2: entered promiscuous mode [ 249.431763][T10392] bridge0: port 1(vlan2) entered blocking state [ 249.438887][T10392] bridge0: port 1(vlan2) entered disabled state [ 249.445488][T10392] vlan2: entered allmulticast mode [ 249.450590][T10392] bridge0: entered allmulticast mode [ 249.457999][T10392] vlan2: left allmulticast mode [ 249.463062][T10392] bridge0: left allmulticast mode [ 250.103002][T10402] syz_tun: entered promiscuous mode [ 250.286648][T10412] openvswitch: netlink: IP tunnel dst address not specified [ 250.371612][T10415] netlink: 124 bytes leftover after parsing attributes in process `syz.2.1288'. [ 250.413548][T10416] netlink: 'syz.0.1289': attribute type 12 has an invalid length. [ 250.444737][T10416] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1289'. [ 250.592677][T10426] tipc: Enabled bearer , priority 0 [ 250.600423][T10426] syzkaller0: entered promiscuous mode [ 250.606093][T10426] syzkaller0: entered allmulticast mode [ 250.613933][T10422] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 250.767940][T10433] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1295'. [ 250.887453][T10431] tipc: Resetting bearer [ 251.001739][T10425] tipc: Resetting bearer [ 251.047850][T10452] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_rx_wq": -EINTR [ 251.110374][T10425] tipc: Disabling bearer [ 251.165860][T10463] tipc: Enabled bearer , priority 10 [ 251.628716][T10472] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 251.669125][T10471] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 251.951933][T10477] netlink: 124 bytes leftover after parsing attributes in process `syz.4.1304'. [ 252.029501][T10483] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1307'. [ 252.044359][T10485] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1308'. [ 252.159975][T10490] bridge3: entered allmulticast mode [ 252.165880][ T5977] tipc: Node number set to 2487195013 [ 252.255930][T10495] netlink: 'syz.1.1312': attribute type 12 has an invalid length. [ 252.277893][T10495] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1312'. [ 252.359208][T10504] lo speed is unknown, defaulting to 1000 [ 252.611436][T10518] netlink: 'syz.0.1320': attribute type 1 has an invalid length. [ 253.062435][T10531] netlink: 'syz.4.1324': attribute type 29 has an invalid length. [ 253.096749][T10542] GUP no longer grows the stack in syz.0.1328 (10542): 200000006000-20000000a000 (200000005000) [ 253.116113][T10542] CPU: 0 UID: 0 PID: 10542 Comm: syz.0.1328 Not tainted syzkaller #0 PREEMPT(full) [ 253.116137][T10542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 253.116149][T10542] Call Trace: [ 253.116157][T10542] [ 253.116164][T10542] dump_stack_lvl+0x189/0x250 [ 253.116194][T10542] ? __pfx_dump_stack_lvl+0x10/0x10 [ 253.116214][T10542] ? __pfx__printk+0x10/0x10 [ 253.116235][T10542] ? find_vma+0xe7/0x160 [ 253.116274][T10542] __get_user_pages+0x24d0/0x2ce0 [ 253.116293][T10542] ? __lock_acquire+0xab9/0xd20 [ 253.116345][T10542] ? __gup_longterm_locked+0xc68/0x1660 [ 253.116374][T10542] __gup_longterm_locked+0xde9/0x1660 [ 253.116402][T10542] ? try_grab_folio_fast+0x1be/0x4f0 [ 253.116435][T10542] ? gup_fast_fallback+0x195f/0x2010 [ 253.116461][T10542] gup_fast_fallback+0x1e6a/0x2010 [ 253.116518][T10542] ? __pfx_gup_fast_fallback+0x10/0x10 [ 253.116537][T10542] ? __mutex_lock+0x335/0x1350 [ 253.116560][T10542] ? futex_unqueue+0x22/0x240 [ 253.116579][T10542] ? futex_unqueue+0x22/0x240 [ 253.116596][T10542] ? futex_unqueue+0x22/0x240 [ 253.116613][T10542] ? is_valid_gup_args+0x11f/0x200 [ 253.116637][T10542] ? get_user_pages_fast+0x4d/0xb0 [ 253.116662][T10542] __iov_iter_get_pages_alloc+0x39a/0xb40 [ 253.116690][T10542] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 253.116714][T10542] ? wait_for_space+0x24d/0x2d0 [ 253.116741][T10542] iov_iter_get_pages2+0x5e/0xa0 [ 253.116766][T10542] __se_sys_vmsplice+0x548/0x10d0 [ 253.116810][T10542] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 253.116834][T10542] ? __pfx_futex_wait+0x10/0x10 [ 253.116870][T10542] ? __lock_acquire+0xab9/0xd20 [ 253.116937][T10542] ? rcu_is_watching+0x15/0xb0 [ 253.116961][T10542] ? do_syscall_64+0xbe/0x3b0 [ 253.116984][T10542] do_syscall_64+0xfa/0x3b0 [ 253.117000][T10542] ? lockdep_hardirqs_on+0x9c/0x150 [ 253.117017][T10542] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.117065][T10542] ? clear_bhb_loop+0x60/0xb0 [ 253.117088][T10542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.117105][T10542] RIP: 0033:0x7f9c7a18ebe9 [ 253.117122][T10542] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 253.117137][T10542] RSP: 002b:00007f9c7af92038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 253.117157][T10542] RAX: ffffffffffffffda RBX: 00007f9c7a3c5fa0 RCX: 00007f9c7a18ebe9 [ 253.117170][T10542] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000010 [ 253.117182][T10542] RBP: 00007f9c7a211e19 R08: 0000000000000000 R09: 0000000000000000 [ 253.117194][T10542] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 253.117204][T10542] R13: 00007f9c7a3c6038 R14: 00007f9c7a3c5fa0 R15: 00007ffe6c6f50a8 [ 253.117237][T10542] [ 253.864039][T10566] __nla_validate_parse: 5 callbacks suppressed [ 253.864056][T10566] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1333'. [ 253.888650][T10565] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 253.934937][T10565] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 254.129346][T10583] FAULT_INJECTION: forcing a failure. [ 254.129346][T10583] name failslab, interval 1, probability 0, space 0, times 0 [ 254.135023][T10577] veth2: entered promiscuous mode [ 254.142142][T10583] CPU: 0 UID: 0 PID: 10583 Comm: syz.2.1344 Not tainted syzkaller #0 PREEMPT(full) [ 254.142164][T10583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 254.142175][T10583] Call Trace: [ 254.142182][T10583] [ 254.142188][T10583] dump_stack_lvl+0x189/0x250 [ 254.142213][T10583] ? __pfx____ratelimit+0x10/0x10 [ 254.142230][T10583] ? __pfx_dump_stack_lvl+0x10/0x10 [ 254.142249][T10583] ? __pfx__printk+0x10/0x10 [ 254.142275][T10583] ? __pfx___might_resched+0x10/0x10 [ 254.142290][T10583] ? fs_reclaim_acquire+0x7d/0x100 [ 254.142317][T10583] should_fail_ex+0x414/0x560 [ 254.142342][T10583] should_failslab+0xa8/0x100 [ 254.142366][T10583] kmem_cache_alloc_noprof+0x73/0x3c0 [ 254.142385][T10583] ? skb_clone+0x212/0x3a0 [ 254.142408][T10583] skb_clone+0x212/0x3a0 [ 254.142425][T10583] ? nfnetlink_rcv+0x486/0x2520 [ 254.142448][T10583] nfnetlink_rcv+0x4b4/0x2520 [ 254.142473][T10583] ? __dev_queue_xmit+0x1d79/0x3b50 [ 254.142501][T10583] ? __dev_queue_xmit+0x27b/0x3b50 [ 254.142532][T10583] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 254.142569][T10583] ? ref_tracker_free+0x63a/0x7d0 [ 254.142590][T10583] ? __asan_memcpy+0x40/0x70 [ 254.142607][T10583] ? __pfx_ref_tracker_free+0x10/0x10 [ 254.142644][T10583] ? skb_clone+0x246/0x3a0 [ 254.142665][T10583] ? __netlink_deliver_tap+0x807/0x850 [ 254.142681][T10583] ? netlink_deliver_tap+0x2e/0x1b0 [ 254.142714][T10583] netlink_unicast+0x82f/0x9e0 [ 254.142744][T10583] ? __pfx_netlink_unicast+0x10/0x10 [ 254.142768][T10583] ? netlink_sendmsg+0x642/0xb30 [ 254.142782][T10583] ? skb_put+0x11b/0x210 [ 254.142802][T10583] netlink_sendmsg+0x805/0xb30 [ 254.142827][T10583] ? __pfx_netlink_sendmsg+0x10/0x10 [ 254.142846][T10583] ? aa_sock_msg_perm+0xf1/0x1d0 [ 254.142864][T10583] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 254.142881][T10583] ? __pfx_netlink_sendmsg+0x10/0x10 [ 254.142898][T10583] __sock_sendmsg+0x219/0x270 [ 254.142931][T10583] ____sys_sendmsg+0x505/0x830 [ 254.142954][T10583] ? __pfx_____sys_sendmsg+0x10/0x10 [ 254.142981][T10583] ? import_iovec+0x74/0xa0 [ 254.143003][T10583] ___sys_sendmsg+0x21f/0x2a0 [ 254.143024][T10583] ? __pfx____sys_sendmsg+0x10/0x10 [ 254.143076][T10583] ? __fget_files+0x2a/0x420 [ 254.143090][T10583] ? __fget_files+0x3a0/0x420 [ 254.143114][T10583] __x64_sys_sendmsg+0x19b/0x260 [ 254.143135][T10583] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 254.143161][T10583] ? __pfx_ksys_write+0x10/0x10 [ 254.143179][T10583] ? rcu_is_watching+0x15/0xb0 [ 254.143200][T10583] ? do_syscall_64+0xbe/0x3b0 [ 254.143222][T10583] do_syscall_64+0xfa/0x3b0 [ 254.143237][T10583] ? lockdep_hardirqs_on+0x9c/0x150 [ 254.143253][T10583] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.143268][T10583] ? clear_bhb_loop+0x60/0xb0 [ 254.143287][T10583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.143303][T10583] RIP: 0033:0x7f5c8e58ebe9 [ 254.143317][T10583] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 254.143331][T10583] RSP: 002b:00007f5c8f455038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 254.143349][T10583] RAX: ffffffffffffffda RBX: 00007f5c8e7c5fa0 RCX: 00007f5c8e58ebe9 [ 254.143361][T10583] RDX: 0000000000000000 RSI: 00002000000038c0 RDI: 0000000000000003 [ 254.143371][T10583] RBP: 00007f5c8f455090 R08: 0000000000000000 R09: 0000000000000000 [ 254.143381][T10583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 254.143391][T10583] R13: 00007f5c8e7c6038 R14: 00007f5c8e7c5fa0 R15: 00007fff1f920058 [ 254.143418][T10583] [ 254.500997][T10577] veth2: entered allmulticast mode [ 254.853293][T10608] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1350'. [ 255.044905][T10617] netlink: 'syz.0.1353': attribute type 1 has an invalid length. [ 255.118832][T10617] 8021q: adding VLAN 0 to HW filter on device bond3 [ 255.245916][T10621] 8021q: adding VLAN 0 to HW filter on device bond3 [ 255.279452][T10621] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 255.300102][T10621] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 255.463435][T10625] gretap1: entered allmulticast mode [ 255.618291][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.852217][T10660] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1365'. [ 255.885276][T10662] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 255.896481][T10666] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1368'. [ 255.916520][T10662] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 255.930965][T10666] geneve2: entered promiscuous mode [ 255.936525][T10666] geneve2: entered allmulticast mode [ 256.045345][T10669] pim6reg: entered allmulticast mode [ 256.075219][T10674] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1372'. [ 256.287545][T10687] netlink: 'syz.3.1375': attribute type 12 has an invalid length. [ 256.303451][T10687] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1375'. [ 256.410191][T10695] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1377'. [ 256.663365][T10706] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1381'. [ 256.780663][T10708] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1382'. [ 256.990351][T10716] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1387'. [ 257.343693][T10727] netlink: 'syz.1.1392': attribute type 1 has an invalid length. [ 257.381884][T10727] netlink: 'syz.1.1392': attribute type 1 has an invalid length. [ 257.455754][T10727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.534261][T10734] bond0: (slave ip6gretap1): making interface the new active one [ 257.567868][T10734] bond0: (slave ip6gretap1): Enslaving as an active interface with an up link [ 257.608564][T10727] veth3: entered promiscuous mode [ 257.618557][T10727] bond0: (slave veth3): Enslaving as an active interface with a down link [ 257.631646][T10727] erspan0: entered allmulticast mode [ 257.641056][T10727] bond0: (slave erspan0): Enslaving as an active interface with an up link [ 257.651417][T10742] tc_dump_action: action bad kind [ 257.981172][T10760] bond1: option mode: unable to set because the bond device is up [ 258.101533][T10764] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode [ 258.667756][T10803] netlink: 'syz.3.1418': attribute type 12 has an invalid length. [ 258.860198][T10816] openvswitch: netlink: IP tunnel dst address not specified [ 258.954688][T10815] bond1: option mode: unable to set because the bond device is up [ 259.031190][T10815] bond0: (slave erspan0): Releasing active interface [ 259.038548][T10815] ip6gretap1: entered promiscuous mode [ 259.100554][T10815] bond0: (slave ip6gretap1): Releasing active interface [ 259.108467][T10815] bond0: (slave ip6gretap1): the permanent HWaddr of slave - 16:5f:da:d1:62:66 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 259.150737][T10815] ip6gretap1: left promiscuous mode [ 259.189738][T10815] bond0: (slave veth3): Releasing active interface [ 259.286873][T10831] __nla_validate_parse: 2 callbacks suppressed [ 259.286890][T10831] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1426'. [ 259.315775][T10831] openvswitch: netlink: Flow key attr not present in new flow. [ 259.437026][T10840] 8021q: VLANs not supported on wlan0 [ 259.620150][T10850] ipvlan0: entered promiscuous mode [ 259.711076][T10853] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1431'. [ 259.940492][T10861] bond2: option mode: unable to set because the bond device is up [ 260.017163][T10861] tipc: Resetting bearer [ 260.061614][T10872] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1440'. [ 260.091823][T10875] tap0: tun_chr_ioctl cmd 1074025676 [ 260.095658][T10874] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1439'. [ 260.099359][T10875] tap0: owner set to 0 [ 260.315199][T10890] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1443'. [ 260.337169][T10889] vlan3: entered allmulticast mode [ 260.347081][T10889] hsr0: entered allmulticast mode [ 260.354569][T10889] hsr_slave_0: entered allmulticast mode [ 260.360713][T10889] hsr_slave_1: entered allmulticast mode [ 260.509496][T10902] syzkaller0: entered promiscuous mode [ 260.545844][T10902] syzkaller0: entered allmulticast mode [ 260.583803][T10902] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 260.670800][T10914] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1452'. [ 261.006921][T10927] syzkaller0: mtu greater than device maximum [ 261.027443][T10927] syzkaller0: entered allmulticast mode [ 261.286757][T10952] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1466'. [ 261.325094][ T5919] hid-generic 0005:16C0:0009.0001: unknown main item tag 0x0 [ 261.341220][T10956] 8021q: adding VLAN 0 to HW filter on device bond4 [ 261.369868][ T5919] hid-generic 0005:16C0:0009.0001: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 261.597033][T10971] syz_tun: entered allmulticast mode [ 261.626417][T10971] syz_tun: left allmulticast mode [ 261.641461][T10965] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1470'. [ 261.688503][T10965] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1470'. [ 261.811711][T10979] ip6tnl1: entered promiscuous mode [ 262.328375][T11008] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1481'. [ 263.204109][T10980] netlink: 'syz.0.1475': attribute type 12 has an invalid length. [ 263.408751][T11021] Set syz1 is full, maxelem 65536 reached [ 263.579275][T11029] 8021q: adding VLAN 0 to HW filter on device bond5 [ 263.594449][T11026] tipc: Enabled bearer , priority 0 [ 263.736240][T11026] syzkaller0: entered promiscuous mode [ 263.747220][T11026] syzkaller0: entered allmulticast mode [ 263.775268][T11026] tipc: Resetting bearer [ 263.910829][T11025] tipc: Resetting bearer [ 264.356017][T11075] netlink: 'syz.3.1501': attribute type 10 has an invalid length. [ 264.622485][ T5933] tipc: Node number set to 1700591676 [ 265.253665][T11025] tipc: Disabling bearer [ 265.262891][T11058] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 265.274192][T11061] 8021q: adding VLAN 0 to HW filter on device macvlan9 [ 265.303037][T11061] bond1: (slave macvlan9): Enslaving as a backup interface with a down link [ 265.341022][T11068] 8021q: adding VLAN 0 to HW filter on device bond5 [ 265.351386][T11081] __nla_validate_parse: 1 callbacks suppressed [ 265.351401][T11081] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1502'. [ 265.351730][T11066] bond1: (slave macvlan9): Releasing backup interface [ 265.428133][T11072] tipc: Resetting bearer [ 265.547984][T11071] 8021q: adding VLAN 0 to HW filter on device macvlan11 [ 265.590705][T11071] bond1: (slave macvlan11): Enslaving as a backup interface with a down link [ 265.662389][T11073] bond1: (slave macvlan11): Releasing backup interface [ 265.826819][T11081] lo speed is unknown, defaulting to 1000 [ 266.147275][T11119] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1509'. [ 266.208096][T11112] 8021q: adding VLAN 0 to HW filter on device bond6 [ 266.234607][T11120] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1509'. [ 266.265596][T11116] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1508'. [ 266.275434][T11116] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1508'. [ 266.929472][T11146] sctp: [Deprecated]: syz.3.1518 (pid 11146) Use of struct sctp_assoc_value in delayed_ack socket option. [ 266.929472][T11146] Use struct sctp_sack_info instead [ 267.013491][T11143] netlink: 'syz.0.1517': attribute type 12 has an invalid length. [ 267.030798][T11148] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1519'. [ 267.125158][T11148] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1519'. [ 267.216069][T11159] netlink: 'syz.0.1522': attribute type 28 has an invalid length. [ 267.224096][T11159] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1522'. [ 267.275498][T11161] 8021q: adding VLAN 0 to HW filter on device bond2 [ 267.547248][T11168] 8021q: adding VLAN 0 to HW filter on device bond3 [ 267.593285][T11174] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1527'. [ 267.605664][T11174] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1527'. [ 267.678917][T11168] 8021q: adding VLAN 0 to HW filter on device macvlan7 [ 267.723832][T11168] bond1: (slave macvlan7): Enslaving as a backup interface with a down link [ 267.806831][T11172] bond1: (slave macvlan7): Releasing backup interface [ 267.836530][T11178] vlan3: entered promiscuous mode [ 267.841592][T11178] team0: entered promiscuous mode [ 267.993822][T11191] nft_compat: unsupported protocol 0 [ 268.049742][T11193] netlink: 'syz.2.1534': attribute type 303 has an invalid length. [ 268.538789][T11225] netlink: 'syz.3.1545': attribute type 11 has an invalid length. [ 269.007057][T11255] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 270.178291][T11265] batadv1: entered promiscuous mode [ 270.268818][T11273] lo speed is unknown, defaulting to 1000 [ 270.343655][ T1328] nci: nci_rsp_packet: unknown rsp opcode 0x73a [ 270.375206][T11276] netlink: 'syz.4.1557': attribute type 12 has an invalid length. [ 270.408616][T11288] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 270.537684][T11297] IPVS: set_ctl: invalid protocol: 136 172.20.20.187:20000 [ 270.600290][T11299] lo speed is unknown, defaulting to 1000 [ 270.724539][T11305] __nla_validate_parse: 9 callbacks suppressed [ 270.724551][T11305] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1564'. [ 270.746271][T11305] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1564'. [ 270.756486][T11305] netlink: 'syz.0.1564': attribute type 1 has an invalid length. [ 270.767670][T11305] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1564'. [ 270.814926][ T5869] block nbd2: Receive control failed (result -107) [ 270.933214][T11311] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1566'. [ 270.942813][T11311] netlink: 236 bytes leftover after parsing attributes in process `syz.0.1566'. [ 270.951844][T11311] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1566'. [ 270.990645][T11314] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 271.007597][T11314] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 271.167493][T11318] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1569'. [ 271.224441][T11320] 8021q: adding VLAN 0 to HW filter on device bond3 [ 271.411748][T11320] 8021q: adding VLAN 0 to HW filter on device macvlan8 [ 271.433886][T11320] bond1: (slave macvlan8): Enslaving as a backup interface with a down link [ 271.490384][T11328] bond1: (slave macvlan8): Releasing backup interface [ 271.523362][T11331] bridge0: port 1(batadv1) entered blocking state [ 271.530626][T11331] bridge0: port 1(batadv1) entered disabled state [ 271.538630][T11331] batadv1: entered allmulticast mode [ 271.546908][T11331] batadv1: entered promiscuous mode [ 271.967344][T11365] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 271.988251][T11365] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1583'. [ 272.015944][ T12] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 272.025725][ T12] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 272.127518][T11370] netlink: 'syz.1.1586': attribute type 2 has an invalid length. [ 272.170781][T11370] k›*·]‘: entered promiscuous mode [ 272.206963][T11370] erspan0: left allmulticast mode [ 272.229523][T11370] syz_tun: left promiscuous mode [ 272.262970][T11370] 8021q: adding VLAN 0 to HW filter on device à [ 272.329371][T11370] 8021q: adding VLAN 0 to HW filter on device team0 [ 272.335932][T11377] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1588'. [ 272.379027][T11370] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 272.406157][T11380] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1586'. [ 272.526432][T11377] team0: Unable to change to the same mode the team is in [ 272.563417][T11384] !: entered allmulticast mode [ 272.583797][T11383] !: left allmulticast mode [ 272.701699][T11391] netlink: 'syz.1.1594': attribute type 1 has an invalid length. [ 272.760274][T11395] netlink: 'syz.2.1596': attribute type 1 has an invalid length. [ 272.766796][T11391] bond6: entered promiscuous mode [ 272.775421][T11391] 8021q: adding VLAN 0 to HW filter on device bond6 [ 272.798126][T11399] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20002 [ 272.817611][T11399] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20002 [ 272.825769][T11391] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 272.826409][T11395] 8021q: adding VLAN 0 to HW filter on device bond4 [ 272.833058][T11391] IPv6: NLM_F_CREATE should be set when creating new route [ 272.833177][T11391] IPv6: NLM_F_CREATE should be set when creating new route [ 272.850735][T11391] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 272.880282][T11397] 8021q: adding VLAN 0 to HW filter on device bond6 [ 272.887776][T11397] bond6: (slave wireguard0): The slave device specified does not support setting the MAC address [ 272.899112][T11397] bond6: (slave wireguard0): Error -95 calling set_mac_address [ 272.962441][T11403] 8021q: adding VLAN 0 to HW filter on device bond4 [ 272.969445][T11403] bond4: (slave vxcan1): The slave device specified does not support setting the MAC address [ 273.003963][T11403] bond4: (slave vxcan1): Error -95 calling set_mac_address [ 273.050349][T11391] bond6: (slave wireguard0): The slave device specified does not support setting the MAC address [ 273.065325][T11391] bond6: (slave wireguard0): Error -95 calling set_mac_address [ 273.111835][T11395] veth3: entered promiscuous mode [ 273.187425][ T6984] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.198701][ T6984] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.360067][T11430] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.388668][T11428] team0: Unable to change to the same mode the team is in [ 273.451516][T11430] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.515483][T11430] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.581306][T11430] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.623430][T11440] tipc: Enabled bearer , priority 0 [ 273.640971][T11440] syzkaller0: entered promiscuous mode [ 273.657049][T11440] syzkaller0: entered allmulticast mode [ 273.707701][T11440] tipc: Resetting bearer [ 273.730222][T11439] tipc: Resetting bearer [ 273.755532][T11439] tipc: Disabling bearer [ 273.804767][ T1053] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.841768][ T1053] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.879390][ T1053] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.927035][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.491320][T11478] tipc: Enabled bearer , priority 0 [ 274.500831][T11475] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 274.542785][T11478] syzkaller0: entered promiscuous mode [ 274.548404][T11478] syzkaller0: entered allmulticast mode [ 274.595318][T11478] tipc: Resetting bearer [ 274.629514][T11477] tipc: Resetting bearer [ 274.665218][T11477] tipc: Disabling bearer [ 274.676624][T11482] netlink: 'syz.2.1623': attribute type 7 has an invalid length. [ 275.003066][ T1053] nci: nci_rsp_packet: unknown rsp opcode 0x73a [ 275.199893][ T30] audit: type=1800 audit(1756866348.910:2): pid=11501 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1627" name="memory.events" dev="tmpfs" ino=1782 res=0 errno=0 [ 275.235782][T11510] nft_compat: unsupported protocol 0 [ 276.059412][T11528] netlink: 'syz.2.1635': attribute type 2 has an invalid length. [ 276.103921][T11528] k›*·]‘: entered promiscuous mode [ 276.130553][T11527] 8021q: adding VLAN 0 to HW filter on device macvlan12 [ 276.161561][T11527] bond1: (slave macvlan12): Enslaving as a backup interface with a down link [ 276.301564][T11461] Set syz1 is full, maxelem 65536 reached [ 276.309977][T11537] __nla_validate_parse: 4 callbacks suppressed [ 276.309992][T11537] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1635'. [ 276.331668][T11528] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 276.368911][T11531] batadv1: left allmulticast mode [ 276.376406][T11531] batadv1: left promiscuous mode [ 276.383516][T11531] bridge0: port 1(batadv1) entered disabled state [ 276.401886][T11531] bond1: (slave macvlan12): Releasing backup interface [ 276.419302][ T5976] lo speed is unknown, defaulting to 1000 [ 276.431303][ T5976] syz2: Port: 1 Link ACTIVE [ 276.674172][T11553] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1641'. [ 277.011387][T11577] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1648'. [ 277.053493][T11586] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1649'. [ 277.150759][T11588] Set syz1 is full, maxelem 65536 reached [ 277.233488][T11593] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1652'. [ 277.250211][T11593] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1652'. [ 277.736122][T11619] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1658'. [ 277.751158][T11621] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1657'. [ 277.767052][T11621] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1657'. [ 277.805842][T11621] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1657'. [ 278.001518][T11630] FAULT_INJECTION: forcing a failure. [ 278.001518][T11630] name failslab, interval 1, probability 0, space 0, times 0 [ 278.039198][T11630] CPU: 0 UID: 0 PID: 11630 Comm: syz.4.1661 Not tainted syzkaller #0 PREEMPT(full) [ 278.039223][T11630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 278.039234][T11630] Call Trace: [ 278.039242][T11630] [ 278.039250][T11630] dump_stack_lvl+0x189/0x250 [ 278.039276][T11630] ? __pfx____ratelimit+0x10/0x10 [ 278.039294][T11630] ? __pfx_dump_stack_lvl+0x10/0x10 [ 278.039313][T11630] ? __pfx__printk+0x10/0x10 [ 278.039337][T11630] ? __pfx___might_resched+0x10/0x10 [ 278.039355][T11630] ? fs_reclaim_acquire+0x7d/0x100 [ 278.039384][T11630] should_fail_ex+0x414/0x560 [ 278.039411][T11630] should_failslab+0xa8/0x100 [ 278.039435][T11630] __kmalloc_noprof+0xcb/0x4f0 [ 278.039455][T11630] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 278.039483][T11630] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 278.039512][T11630] genl_family_rcv_msg_doit+0xb8/0x300 [ 278.039546][T11630] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 278.039577][T11630] ? apparmor_capable+0x137/0x1b0 [ 278.039599][T11630] ? bpf_lsm_capable+0x9/0x20 [ 278.039619][T11630] ? security_capable+0x7e/0x2e0 [ 278.039649][T11630] genl_rcv_msg+0x60e/0x790 [ 278.039677][T11630] ? __pfx_genl_rcv_msg+0x10/0x10 [ 278.039697][T11630] ? __pfx_team_nl_options_set_doit+0x10/0x10 [ 278.039718][T11630] ? __asan_memcpy+0x40/0x70 [ 278.039736][T11630] ? __pfx_ref_tracker_free+0x10/0x10 [ 278.039767][T11630] netlink_rcv_skb+0x205/0x470 [ 278.039782][T11630] ? __lock_acquire+0xab9/0xd20 [ 278.039804][T11630] ? __pfx_genl_rcv_msg+0x10/0x10 [ 278.039824][T11630] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 278.039860][T11630] ? down_read+0x1ad/0x2e0 [ 278.039881][T11630] genl_rcv+0x28/0x40 [ 278.039898][T11630] netlink_unicast+0x82f/0x9e0 [ 278.039929][T11630] ? __pfx_netlink_unicast+0x10/0x10 [ 278.039953][T11630] ? netlink_sendmsg+0x642/0xb30 [ 278.039968][T11630] ? skb_put+0x11b/0x210 [ 278.039988][T11630] netlink_sendmsg+0x805/0xb30 [ 278.040018][T11630] ? __pfx_netlink_sendmsg+0x10/0x10 [ 278.040038][T11630] ? aa_sock_msg_perm+0xf1/0x1d0 [ 278.040056][T11630] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 278.040073][T11630] ? __pfx_netlink_sendmsg+0x10/0x10 [ 278.040091][T11630] __sock_sendmsg+0x219/0x270 [ 278.040117][T11630] ____sys_sendmsg+0x505/0x830 [ 278.040142][T11630] ? __pfx_____sys_sendmsg+0x10/0x10 [ 278.040171][T11630] ? import_iovec+0x74/0xa0 [ 278.040195][T11630] ___sys_sendmsg+0x21f/0x2a0 [ 278.040215][T11630] ? __pfx____sys_sendmsg+0x10/0x10 [ 278.040241][T11630] ? rcu_read_lock_any_held+0xb3/0x120 [ 278.040274][T11630] ? sb_end_write+0xe9/0x1c0 [ 278.040305][T11630] ? __pfx_vfs_write+0x10/0x10 [ 278.040337][T11630] __x64_sys_sendmsg+0x19b/0x260 [ 278.040359][T11630] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 278.040389][T11630] ? __pfx_ksys_write+0x10/0x10 [ 278.040408][T11630] ? rcu_is_watching+0x15/0xb0 [ 278.040431][T11630] ? do_syscall_64+0xbe/0x3b0 [ 278.040453][T11630] do_syscall_64+0xfa/0x3b0 [ 278.040472][T11630] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.040489][T11630] ? clear_bhb_loop+0x60/0xb0 [ 278.040508][T11630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.040523][T11630] RIP: 0033:0x7fc563b8ebe9 [ 278.040546][T11630] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 278.040561][T11630] RSP: 002b:00007fc56498e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 278.040580][T11630] RAX: ffffffffffffffda RBX: 00007fc563dc5fa0 RCX: 00007fc563b8ebe9 [ 278.040593][T11630] RDX: 0000000024040084 RSI: 0000200000004bc0 RDI: 0000000000000004 [ 278.040604][T11630] RBP: 00007fc56498e090 R08: 0000000000000000 R09: 0000000000000000 [ 278.040614][T11630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 278.040624][T11630] R13: 00007fc563dc6038 R14: 00007fc563dc5fa0 R15: 00007ffd0efdfa08 [ 278.040656][T11630] [ 278.082295][ C1] [ 278.413858][ C1] ================================ [ 278.418942][ C1] WARNING: inconsistent lock state [ 278.424037][ C1] syzkaller #0 Not tainted [ 278.428429][ C1] -------------------------------- [ 278.433512][ C1] inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage. [ 278.440332][ C1] modprobe/11636 [HC0[0]:SC1[1]:HE1:SE0] takes: [ 278.446552][ C1] ffff888054a580a8 (&p->tcfa_lock){+.?.}-{3:3}, at: est_timer+0xd4/0x9f0 [ 278.454982][ C1] {SOFTIRQ-ON-W} state was registered at: [ 278.460675][ C1] lock_acquire+0x120/0x360 [ 278.465250][ C1] _raw_spin_lock+0x2e/0x40 [ 278.469826][ C1] tcf_ct_init+0x7cc/0x1950 [ 278.474402][ C1] tcf_action_init_1+0x463/0x6d0 [ 278.479408][ C1] tcf_action_init+0x2cf/0xab0 [ 278.484244][ C1] tc_ctl_action+0x430/0xbd0 [ 278.488911][ C1] rtnetlink_rcv_msg+0x77c/0xb70 [ 278.493914][ C1] netlink_rcv_skb+0x205/0x470 [ 278.498741][ C1] netlink_unicast+0x82f/0x9e0 [ 278.503574][ C1] netlink_sendmsg+0x805/0xb30 [ 278.508402][ C1] __sock_sendmsg+0x219/0x270 [ 278.513150][ C1] ____sys_sendmsg+0x505/0x830 [ 278.517982][ C1] ___sys_sendmsg+0x21f/0x2a0 [ 278.522722][ C1] __x64_sys_sendmsg+0x19b/0x260 [ 278.527724][ C1] do_syscall_64+0xfa/0x3b0 [ 278.532292][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.538248][ C1] irq event stamp: 4332 [ 278.542374][ C1] hardirqs last enabled at (4332): [] _raw_spin_unlock_irq+0x23/0x50 [ 278.552075][ C1] hardirqs last disabled at (4331): [] _raw_spin_lock_irq+0x7d/0xf0 [ 278.561599][ C1] softirqs last enabled at (3938): [] __irq_exit_rcu+0xca/0x1f0 [ 278.570857][ C1] softirqs last disabled at (4329): [] __irq_exit_rcu+0xca/0x1f0 [ 278.580116][ C1] [ 278.580116][ C1] other info that might help us debug this: [ 278.588148][ C1] Possible unsafe locking scenario: [ 278.588148][ C1] [ 278.595582][ C1] CPU0 [ 278.598849][ C1] ---- [ 278.602105][ C1] lock(&p->tcfa_lock); [ 278.606330][ C1] [ 278.609759][ C1] lock(&p->tcfa_lock); [ 278.614159][ C1] [ 278.614159][ C1] *** DEADLOCK *** [ 278.614159][ C1] [ 278.622275][ C1] 3 locks held by modprobe/11636: [ 278.627277][ C1] #0: ffffffff8e845c90 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_perm+0x1e3/0x4b0 [ 278.636487][ C1] #1: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xa5/0x2390 [ 278.646126][ C1] #2: ffffc90000a08be0 ((&est->timer)){+.-.}-{0:0}, at: call_timer_fn+0xbe/0x5f0 [ 278.655340][ C1] [ 278.655340][ C1] stack backtrace: [ 278.661215][ C1] CPU: 1 UID: 0 PID: 11636 Comm: modprobe Not tainted syzkaller #0 PREEMPT(full) [ 278.661233][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 278.661241][ C1] Call Trace: [ 278.661248][ C1] [ 278.661255][ C1] dump_stack_lvl+0x189/0x250 [ 278.661276][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 278.661292][ C1] ? __pfx__printk+0x10/0x10 [ 278.661311][ C1] ? print_lock_name+0xde/0x100 [ 278.661330][ C1] print_usage_bug+0x297/0x2e0 [ 278.661344][ C1] valid_state+0xc3/0xf0 [ 278.661357][ C1] mark_lock_irq+0x36/0x390 [ 278.661370][ C1] ? __kernel_text_address+0xd/0x40 [ 278.661388][ C1] ? unwind_get_return_address+0x4d/0x90 [ 278.661412][ C1] mark_lock+0x11b/0x190 [ 278.661424][ C1] __lock_acquire+0x680/0xd20 [ 278.661445][ C1] ? est_timer+0xd4/0x9f0 [ 278.661463][ C1] lock_acquire+0x120/0x360 [ 278.661481][ C1] ? est_timer+0xd4/0x9f0 [ 278.661502][ C1] ? lockdep_unlock+0x89/0x120 [ 278.661520][ C1] _raw_spin_lock+0x2e/0x40 [ 278.661539][ C1] ? est_timer+0xd4/0x9f0 [ 278.661557][ C1] est_timer+0xd4/0x9f0 [ 278.661577][ C1] ? call_timer_fn+0xbe/0x5f0 [ 278.661596][ C1] ? call_timer_fn+0xbe/0x5f0 [ 278.661615][ C1] ? __pfx_est_timer+0x10/0x10 [ 278.661637][ C1] call_timer_fn+0x17e/0x5f0 [ 278.661655][ C1] ? __pfx_est_timer+0x10/0x10 [ 278.661673][ C1] ? call_timer_fn+0xbe/0x5f0 [ 278.661690][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 278.661712][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 278.661731][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 278.661744][ C1] ? __pfx_est_timer+0x10/0x10 [ 278.661763][ C1] __run_timer_base+0x61a/0x860 [ 278.661779][ C1] ? ktime_get+0x3e/0x1f0 [ 278.661798][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 278.661814][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 278.661835][ C1] run_timer_softirq+0xb7/0x180 [ 278.661853][ C1] handle_softirqs+0x283/0x870 [ 278.661869][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 278.661884][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 278.661900][ C1] __irq_exit_rcu+0xca/0x1f0 [ 278.661913][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 278.661929][ C1] irq_exit_rcu+0x9/0x30 [ 278.661941][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 278.661963][ C1] [ 278.661968][ C1] [ 278.661974][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 278.661992][ C1] RIP: 0010:lock_acquire+0x175/0x360 [ 278.662012][ C1] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 3b 44 03 11 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e [ 278.662025][ C1] RSP: 0018:ffffc9001be2f4d8 EFLAGS: 00000206 [ 278.662038][ C1] RAX: 0db3d22b44ca6400 RBX: 0000000000000000 RCX: 0db3d22b44ca6400 [ 278.662048][ C1] RDX: 0000000000000000 RSI: ffffffff8dba89e1 RDI: ffffffff8be33800 [ 278.662058][ C1] RBP: ffffffff8172c195 R08: 0000000000000000 R09: ffffffff8172c195 [ 278.662068][ C1] R10: ffffc9001be2f698 R11: ffffffff81ac3820 R12: 0000000000000002 [ 278.662078][ C1] R13: ffffffff8e139ee0 R14: 0000000000000000 R15: 0000000000000246 [ 278.662088][ C1] ? unwind_next_frame+0xa5/0x2390 [ 278.662103][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 278.662120][ C1] ? unwind_next_frame+0xa5/0x2390 [ 278.662140][ C1] ? unwind_next_frame+0xa5/0x2390 [ 278.662155][ C1] ? __x64_sys_newfstat+0xfc/0x200 [ 278.662170][ C1] ? unwind_next_frame+0xa5/0x2390 [ 278.662184][ C1] unwind_next_frame+0xc2/0x2390 [ 278.662199][ C1] ? unwind_next_frame+0xa5/0x2390 [ 278.662215][ C1] ? unwind_next_frame+0xa5/0x2390 [ 278.662229][ C1] ? security_inode_getattr+0x12f/0x330 [ 278.662248][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 278.662264][ C1] arch_stack_walk+0x11c/0x150 [ 278.662282][ C1] ? __x64_sys_newfstat+0xfc/0x200 [ 278.662298][ C1] stack_trace_save+0x9c/0xe0 [ 278.662313][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 278.662333][ C1] kasan_save_track+0x3e/0x80 [ 278.662349][ C1] ? kasan_save_track+0x3e/0x80 [ 278.662364][ C1] ? __kasan_kmalloc+0x93/0xb0 [ 278.662380][ C1] ? __kmalloc_noprof+0x27a/0x4f0 [ 278.662403][ C1] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 278.662417][ C1] ? tomoyo_path_perm+0x213/0x4b0 [ 278.662435][ C1] ? security_inode_getattr+0x12f/0x330 [ 278.662450][ C1] ? __x64_sys_newfstat+0xfc/0x200 [ 278.662479][ C1] __kasan_kmalloc+0x93/0xb0 [ 278.662497][ C1] __kmalloc_noprof+0x27a/0x4f0 [ 278.662514][ C1] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 278.662529][ C1] tomoyo_realpath_from_path+0xe3/0x5d0 [ 278.662544][ C1] ? tomoyo_domain+0xd9/0x130 [ 278.662560][ C1] tomoyo_path_perm+0x213/0x4b0 [ 278.662579][ C1] ? tomoyo_path_perm+0x1e3/0x4b0 [ 278.662595][ C1] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 278.662613][ C1] ? kasan_save_free_info+0x46/0x50 [ 278.662642][ C1] security_inode_getattr+0x12f/0x330 [ 278.662658][ C1] __x64_sys_newfstat+0xfc/0x200 [ 278.662673][ C1] ? __pfx___x64_sys_newfstat+0x10/0x10 [ 278.662694][ C1] ? do_user_addr_fault+0xc8a/0x1390 [ 278.662717][ C1] ? do_syscall_64+0xbe/0x3b0 [ 278.662732][ C1] do_syscall_64+0xfa/0x3b0 [ 278.662746][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 278.662758][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.662772][ C1] ? clear_bhb_loop+0x60/0xb0 [ 278.662786][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.662800][ C1] RIP: 0033:0x7f2f7d24fad7 [ 278.662813][ C1] Code: 73 01 c3 48 8b 0d 21 f3 0d 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 05 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 f1 f2 0d 00 f7 d8 64 89 02 b8 [ 278.662825][ C1] RSP: 002b:00007fffc9c08d58 EFLAGS: 00000297 ORIG_RAX: 0000000000000005 [ 278.662838][ C1] RAX: ffffffffffffffda RBX: 000055ddfabf42a0 RCX: 00007f2f7d24fad7 [ 278.662848][ C1] RDX: 00007f2f7d32dea0 RSI: 00007fffc9c08d60 RDI: 0000000000000000 [ 278.662858][ C1] RBP: 00007f2f7d32dff0 R08: 00007f2f7d32fac0 R09: 0000000000000080 [ 278.662867][ C1] R10: 0000000000000004 R11: 0000000000000297 R12: 00007fffc9c08ec8 [ 278.662876][ C1] R13: 0000000000000000 R14: 00007f2f7d1314d0 R15: 0000000000000000 [ 278.662890][ C1]