last executing test programs: 3.542888568s ago: executing program 3 (id=1329): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x2000009, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0x64}, 0x1c) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'essiv(authenc(rmd160-generic,cbc-camellia-aesni-avx2),sha1-avx)\x00'}, 0x58) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x4, 0x1804, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = syz_open_procfs$namespace(0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, 0x0, 0x0) write(r5, &(0x7f0000000000)="240000001a005f0214f9f4070009", 0xe) r6 = socket$l2tp6(0xa, 0x2, 0x73) close(0x3) socket(0x2000000000000021, 0x2, 0x10000000000002) recvmmsg$unix(r6, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10022, 0x0) ioctl$BTRFS_IOC_RM_DEV(r4, 0x5000940b, &(0x7f0000000a00)={{r4}, "43034353bc9f685fc5d678c047a4a5292e3237ca30cb0f3a9420c9fba0ec4682958baa9e0e94da65970a1c631b5f0139cf3987ad6efa4f483175bc44153da819970a879c6f3ada010c83640ed4e74958a739e85472f4c4c77469644ceadcdc5c688787fd96c27af4ce68d4a65843bd76785c6e519ee90f9a6920bf477c4891a82b124921220cbe3b082be08d48c6ed9eb46a9dc47e23779e961a3f99ea4191028fc46a22e8aad0c413261138ed0b5e2056e522c88a23ad104748d91912d3a9d239ce3ef5ce9c223039b540070954e9505d511ad49ed448daf48cab80390481984f69d19168efdba082cd2a7655d6b0139b0df978c71cd3782f409d56bf0fe9a685e0f79624ac8eb9850ec36fdf31c73234e61c34de1be1c48b7bc738125753deb1f50a00415fb76765ea1155af266b7f6f3ecc7c7754a7209684c4384e6a0884561230064b245748e9fa9f40e206d6c0008730bc1c1bc1a5649e2c4252cab52fe3b883b9a0f3f8deb174325b2a1734809c927458120698ade675a545a0082dc1a3daa41ae2923d0531d18f8231909d20edb1475df9c0684bcbd764711d9df0fcc98375d8afb5b613b79af337615b069f10f2d445fc76905d8fa1a120b65a0d62c4bef582e7292ee61629555dfaece502e533d2789773100c9ddcc1080e9574db85ffc46167537683ecc535c0684b4f64ae228bc16b6236a85e74f61886ea3aba3c6e4faf1dbd2722af34655cbe76df53958323fa8a59e1543cf60721caa411cb9c824798756d3631c61d45bf5018d09f7a2884e3672fefa55c0d7222ef614598f80518d4067061a18ef791d1dc153131417515b13afd314a49370ab130756c19c344daec5c857a867cdd5e73e7f7f4e4611a83b484af2d8cfe7a70d248719ac90c463182edec6c2fb702d9c0a4a141fdfb2a88121532da6f7bee16a4bfd9aa342a744eb798d4c274ce2fe5395966f69736b1d8e8cc737d2b7d1be6dd133eb76e2697ef6a07766a5ec66348fa6373d085be3310936bf6c39807d670d2a68c9510142f55f48455ae19377d690acefb34294622c44384def20d9d2b5f2001f94ddf291945746b3c264acf6face324e50b919f5f36dad3cacd6e6a894d773068481821d478f196ac8a1b097cfe1176b4f46e1db657e56cbd482abe729e7fc4d2b11f094cbaedd342cf72738683c8f8a075e1a6f27edff0d9e891e22b4d51e0c6bcb612390b395ec9b6b6590ca6eae2f7a8a0ffe079b8083d4a0601441571cb3ad6a5da6c1ac4143c17937710d01ff9b3f00908d8c2a9d6950d02b47b3b282aad26980f2b30d4366d7ac3691a2ef8aa959aaabc5b306ad2597a2613fb7237040e95d950ba6b78dbc4522fa0af7711f448be54019bf002719f2450d36ba9e80291357360634df225a9fcf5699658a26243ac82c15b8d4fb5eca179f09cee87a8bef8fdacbcfa74f93bf2a9a79063c17c08995ed2fe5e41eafb99b6eb7090623e3147d04f94e21d0302b1e398c0e74863156a2e4cf34c0f65a7b927f8cb840ca7ea907a6ee218bf39e24134f0f33206ca13366041940d265009eb2ee66a9f0ab3335ab14ff5a19b9d18fc98c547880cc7bf19513a353395933f1df3ad602e718ff3c344234678ee263e6f1023470466899bda51ce5e4f82f403e273a0ea32bf813f4ce90f21acc91a38379cfa454c183d5cdf670d25dd6ad168b7c4fb74cc5e6e17af5eef96478df04de0f703716e592ff8f2f7f4d36eef28095151aa1082bf828e12ca9a331ddeefddcfdb52ad2b4e89448f309ee8756224ff1878e37f3a177c0d78d7f71013252377616fa9d6d547ed9e562eae85a4c7e8776770c58e6d77ff3376c0f5c16966b8545a5f1a336bf4d60eb606035f284e14c69ab8b909938dd4f8257f5da1e8d16513c0f1a561d55208db14d69d33259d9e2befde605014340018f26079860879627754ba9e924dc3efbec4fa1186d075666a87662113bfb8750fd83a26b227ca421d5a266fac72a4258462e0fb7b2ce5ac6e692d82c2c6c8383bbae39d884c23c4c47555f924b22b60f621f2db8d009da303c919c847962ddefa13f1a0195e3b33881f11d0a15faf5617b8af3e684f50cb3a53e13b18e23a93059ecc630f98832c3f9cc8617a307b7373971aa35ddcf474fce083578ed556fbb0dc9e5ccebcaccf9fc382931278e5ad16b73432287be57f9e9d746a1b0ed9558378a7e819fd808b3aa608203c9f62bfbe88785be6c4da06dca42dcac31c6d850b82166951524df711bc044e12abf6d1817be7dbeaf19dbe068db18d93e87e1101d8c09298a71fd891d5976fc311903c9977c45fd8c8f375fc2d3f2b2ef58bf4378f148ff3a4d378174e1f26085b22cee03e252e73c28c71fc4552f1f3b9198fb6fed1c2133a65c7eda35a21b5c891db6e9cfc78abae9d2caff25bbf982f665ebaa870e87d289eb59f9b8f6151545dedf74c4d27d4aff17b507bcd71fe12efa3195bdbf5b757758f3a4b77283f7e6cd56d566c2bb3918d860eb23db3933ab1bbbf5ca63b5026f72dab99dac9a4a613b2da18eac33a398d158763bef75f70e7fc5c75a7cb7ab56b325f95a1e6d9743dd2487b6c7b5709258add8b5019a2fc22f0d18822ac79c5b3b8d5b8f7dbf611a6b1143c21ffdfb4764d10899f84892a28034a5872f7ee1015141f76368762dbd61d68308746375f8f9640019a25dd3a11c4b3596d86c83e8047cf5c47739623cb9aab3e9273b741b89a12d00829ba96301bf35f9bc7164428a031edeab4c746c1f4a38c9c05e8b0d891b7cc03aa35e9c9aacecf158381241114806a91ee0d5c1f2523b5b9f7b8f38e083c05bca2200ac96dc63272004e9ef20fd577ea7ae4a3387306fa5656229c03e4f968ce39ef07b7a89051f4f577d65651fb64ac6265be9aa8dcb238343cedcafaf7c562225fd1840dc5ccb90322766d1634993360570ec7feb40cb3101bca80a58640d0bac91308437014df7c14da356427a6ecca491e6f9588ec2c7f896e39b099591086b04d0d568eb399f0bb8c841611931cb2fd6fd73ebb7f8b9b73d48fb3b294e052953b315a951019a043b7ebca3c4821d7c540facf4c2bb4534aa3445decfd270b8f03a9d71dc2a8e4c50439c956161e1ad4b067b197db3b86b8b4022f2ee27a7e9d4658c3cd641e34ad088969674f3cc7bcc6256221922fed4c749a0d41c095c0e3995056b43744ad9b8b6ba6565c2cc4fd43d8a9abeb60e5c2db0fee542869de33fd32ef72d7bc6a918763f187538a830280e326448dca9fa31403054357234592cc1d55504d9ab55cdaa369958626b476bdbf7c5913f38db214f1be91020b327346b1e05a90026b67915abbf1fd69103935e87699dd3f920da161441764598005fbd92ff22f287ca6809be5497322b42cc300e76e7877d42949a10c79cf8a7b22e46b34b4624a0550de07ef48547abac7d30e79d6028c70aa6942c8558d61c4d3e831cb586ed72e18fd5c1a15e4d81d1c35b5bd143ec188983c524a52f69ba844fdb3b20909d32997cdc822a5646adc597463c0f354aa55943d9eca6b01751902cd8ad8bb8e19f82cccbc696989332be3af34fc9547abfbee54267d775e85e65b2d5ecc0947b2772aeb7b41db3edd3025f5f2d57b0edda51b69191bbe8bfdc06ccb2bb1f55a104bc3b4298470d44531a1b1f1400a094453a9ebe3e06f522847be402b85aecc13422ca423c7357c7cefd5acb9b7dab1e724076b755323bf375918f0de79c78dd2b76963f35ca8c3c7bf3e9fa3b6e12b63646a717a92abac968286b1d0c6b4277b9a4a975fd6a5ad30e18aeae32040687265d0d1848d30190e43cdcf167f8db57ea04be0ce696f4257abe3427eb9b785ee619c52aef573266a886b298c4371ae2e7c141c5263dd6fa898171b3b6e3194a446fe27807bb685b700188acff8d10cf5ed0d8007db138dd93b5afc9dd60470e1639b712aa8669094c32f8c8652be3d2b7100281d7d9495795a97c3dff5a844ce6a2c2c1aa92356bc7b767db8bf3a9a438aaea4d3806afa53ba86922e4c4424485cc05dc26b44059528cbf208a6774eb6dfdf1492393d9c17268a97ead7700fb2d61e3b9378f09e5bafec089b2b8f971b78ac6b5dfda6ae423ad9fb162306912c76cc6c6936b4cc08598b5cf4f3037ce1c03f0dda1018d1600c3f452d2ad9a7b52eae3b55f1d9b0e0a3283cca3db142d3daf62a8c758b9a294779b645b05dcd478c42ad24e5cec8c25da6bd7271e9df0195e13737f86996da964b6b11fabce88258c5b628cc3368ebcb7c8350f0d17c9af5250516c8cf31407ed32704a5fb5d7da05750485c687452ad238bc7f645dc9efa61f88b3f8c3faeb1f8e44a9b907fc5c3ad527270732f3ebd574a75e8ff7b6e6537f54fbf0e8e3316efda3eab14e4f0d7c74d6e3f82e0145588106be9da5d1c74297cc72bf4783078d7ffee9ded2349a53305910998c2837254e864f31e2287dcc19a7d6fb6cdcf80a5dede163a6c3d36e2c5861b89a46eaf0504ad0c7d16ddf02bf6f1d90bf9feaa0b7d9cfefd47d08aac22ee4a6241191f4d6acbdcf6eceae1d2d2028b6e559fb550e1f4a5ee9866da456c7eb034c2f34238572f0d3e3085b1f03509cca9958701fc4a73539c4d446c065bc9e2a4ff1861471c31c6223882ccf0258dcd79634975b560a4905843e26ac6a99346e2de740e4deaa6925a7afdc98025b9b89fc02035efa1457f7b343d3a4c0feeff66f6c719db8528bc49bffcdae000b64fdf1cc755d993b9a77da4c26d8cb8700545c68e4ca1bfd30fb70ad2fe57ce2881cc5b1b6e5126e7705abcc0b8e553252ebc893b5f045e51acdb19944ace5182269f111d1a3533de0c38ec8db309dc44a1c5734846fd5d9e18b07df7ebdbb546f115dc5ef4423351f131c5739e4eed6136dfa022c99c1323144db427af9e3e5c2be67967a3b637413beca8c2081d664af22ac9058bbeeb0d843d09111245a36a245e77fccd3d4e7b359f6ba6521e5a6cbd99b2ef135df13d76d07d0e847ae16ce2b4050c58a775460b6ed86631074516667d590771b2809d55d32b1ed895531e1ee10b25eec4939b0360a2064076a40a8780611ec7f261132e5f7dca1e7284085795408d1385ed7fe4a5cb18c29108cde9b7cbe844d929838a231899e772a381403685446273a564ce6c35aa294ea02b91f61e093ef9191c2d4cf8b722b17093b16d6a3b34444ff9e22ca1dd429d40c2f655ddcf7564aa1cde88a652c5a8589b522ff88938203b09b2fca155be384af4c8d12a32e705ad1d2c4e4e3a9d1a151956ae0f19f9c88ab11137975a5ab53047f5ee69ebbb8c1a2b605e738584a29ad501c0f949aa6a9c0247f17b40f3d8ccbef3c9cc2602d2eb5bf84c7d5bd2480f3478b7975cfa90faf03bbea007baa6682bce23cd245ac372523cf758b939030ad185bc1d0f5753a7268bee39056345130353e0d44d5e46f4a1d933e553f7768071b41d08631a1165b5af7ca4e9d17a3c67ac57aea2d530b6b3a21c279708e71ed6464d01409da47dbadbce0583609105ea631eab93924c1937bf496afe2a4e0758ca521753f8e03e9998618a3304329f70f9a8358416b96c0b42a2287cbd435390a2131d33a8081d5199834a13de7d195ee118bd442af7f34ac1bcce9fad8d61ccc124ed99830dec1d77e90f061ff04043d5e0ea6f1e581a378d2bcbe128ac3756e6070b8321ee6a27634deb278e60e73b9a75083f470808b4b3c4e8661ca91ebed4d028c0683623dc8cbdc01baac0a9451319d960"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='htcp\x00', 0x5) setsockopt$inet6_tcp_int(r0, 0x6, 0xc, &(0x7f0000000000)=0x100000001, 0x14) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f00000000c0)="1c0000001e005f0214fffffffffffff8070000001700000000000000", 0x1c) 3.099025794s ago: executing program 2 (id=1337): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) (async) r0 = socket(0x10, 0x803, 0x0) (async, rerun: 32) r1 = socket$unix(0x1, 0x1, 0x0) (async, rerun: 32) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_IDLE(r2, 0x103, 0x7, &(0x7f0000000140)=0x401, 0x4) (async, rerun: 32) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) (rerun: 32) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000700)={'bond0\x00'}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x5, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x4, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0x74, 0x5, 0x0, 0xd, 0x8, 0x91f0}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_REORDER={0xc, 0x3, {0x3, 0x3ff}}, @TCA_NETEM_RATE64={0xc, 0x8, 0x439f2cc556bf125a}, @TCA_NETEM_CORR={0x10, 0x1, {0x80000001, 0x10000, 0x62}}, @TCA_NETEM_ECN={0x8}]}}}]}, 0x84}}, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x2}, 0x6) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) (async) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) (async) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x54, r7, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x90}, {0xc}}]}, 0x54}, 0x1, 0x0, 0x0, 0x95}, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x6c, r7, 0x0, 0x70bd2c, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x5}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x881}, 0x800) (async, rerun: 64) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000d03000000000000000000000105002000800000000000000000000003000000000200000002"], 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) (async, rerun: 64) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB="d8000000", @ANYRES16, @ANYBLOB="04002dbd7000f2dbdf254f0000000c00839ced540000680000004c007a8008000400000000181c000200134ecc4d908540c3c8630b918a29360800040004005111335ced5fd94e0800040009000000080004000300000048007a801400010003d869f47d8c428eaa74b31794b4b314b5000400000000000c0003004180081ee4f88f1a080004000c0000000c0003007858754e3c504054080004000800000004007a8020007a800800040005000000140002002929590c"], 0xd8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffd61, &(0x7f0000000000), 0x4e, 0x0, 0x0, 0x2c}, 0x44000) 3.008692467s ago: executing program 2 (id=1338): syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0xff, @mcast1, @mcast1, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.effective_mems\x00', 0x275a, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet_dccp(0x2, 0x6, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) pipe(&(0x7f0000000100)) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="4400000010000304fcffffff3f00000000000000", @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000140012800b0001006970766c616e0000034802a180080005", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB], 0x44}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) 2.907960698s ago: executing program 0 (id=1339): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c00000010000304000000000000000100000300", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000006200028008004040e3f8ba"], 0x3c}}, 0x0) 2.85980238s ago: executing program 2 (id=1340): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200), 0x0) recvmmsg(r2, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/48, 0x30}], 0x1}, 0x80000001}], 0x1, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x9, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffff8}, {}, {0x7, 0x0, 0xb, 0x7}}, @generic={0x7, 0x2, 0xd, 0x6}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'syztnl2\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x20, 0x80, 0x9, 0x0, {{0x3d, 0x4, 0x2, 0x8, 0xf4, 0x65, 0x0, 0x81, 0x2f, 0x0, @local, @loopback, {[@generic={0x82, 0x4, "b438"}, @lsrr={0x83, 0x7, 0x8d, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_addr={0x44, 0x14, 0x33, 0x1, 0xc, [{@rand_addr=0x64010102, 0x10}, {@remote, 0x4}]}, @cipso={0x86, 0x4b, 0x1, [{0x0, 0xc, "6aed90dcdcbeae4b9ca7"}, {0x6, 0x7, "503eb7b4a2"}, {0x7, 0xc, "61945f6609d1ebcbea70"}, {0x5, 0x10, "7430ff776380e0d759265ffb2bf6"}, {0x1, 0xf, "a3b4379de2ed0c0a4ebc5c69de"}, {0x6, 0x7, "0cbba3366f"}]}, @cipso={0x86, 0x10, 0x1, [{0x1, 0xa, "c29e143a7208e174"}]}, @noop, @cipso={0x86, 0x65, 0x0, [{0x2, 0xe, "8af9e3d6719a74bb9b4ba13d"}, {0x7, 0x10, "9de845bc2b85d7b3db21d3fa8840"}, {0x7, 0xd, "f69cffdaaff01b3c968e16"}, {0x7, 0xe, "5690bae7d1d45cfea1f21f1f"}, {0x2, 0x12, "5a2817dbe3d1b0a577020d24ff51c2b1"}, {0x6, 0xc, "89c88104f4f8fccbcb1a"}, {0x7, 0x8, "056c1d5891d3"}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000280)={'ip6tnl0\x00', 0x0, 0x29, 0x3, 0x6, 0x8, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, 0x1, 0x8000, 0x8, 0x6}}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r7) sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010027bd7000fbdbdf250100000008000100030000002c00048005000300e1ffffff04000300000000814100030002000000050003000000000005000300020000000800020002"], 0x50}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0xc3, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000800)={&(0x7f00000007c0)='ext4_fc_replay\x00', r4}, 0x18) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000340)={@local}, &(0x7f0000000380)=0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000480)={'syztnl2\x00', &(0x7f00000003c0)={'syztnl1\x00', 0x0, 0x20, 0x700, 0xffffffff, 0x7bfe, {{0x1d, 0x4, 0x1, 0x23, 0x74, 0x66, 0x0, 0x3, 0x2f, 0x0, @empty, @private=0xa010100, {[@timestamp_addr={0x44, 0x54, 0x1c, 0x1, 0x2, [{@broadcast, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@remote, 0x4}, {@dev={0xac, 0x14, 0x14, 0x36}, 0xa}, {@private=0xa010102, 0x70}, {@local, 0x8853}, {@loopback, 0xff}, {@multicast2, 0x8}, {@multicast1, 0x9}, {@private=0xa010102}]}, @noop, @rr={0x7, 0x7, 0x3c, [@broadcast]}, @end]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'gretap0\x00', &(0x7f00000004c0)={'gretap0\x00', 0x0, 0xb763d99132c1a11d, 0x40, 0x5, 0x200, {{0x51, 0x4, 0x0, 0x3, 0x144, 0x66, 0x0, 0x10, 0x2f, 0x0, @rand_addr=0x64010100, @multicast2, {[@timestamp_addr={0x44, 0x54, 0x5a, 0x1, 0x5, [{@dev={0xac, 0x14, 0x14, 0x16}, 0x101}, {@empty, 0x1a32}, {@rand_addr=0x64010102}, {@empty, 0xfffffffd}, {@empty, 0x7}, {@empty, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@broadcast, 0x6}, {@local, 0x10001}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}]}, @rr={0x7, 0xb, 0xea, [@rand_addr=0x64010102, @rand_addr=0x64010102]}, @timestamp={0x44, 0x1c, 0xbe, 0x0, 0x2, [0x9, 0xb79, 0x4, 0x8, 0xfffffff5, 0x4990c96e]}, @timestamp_addr={0x44, 0x3c, 0x46, 0x1, 0xe, [{@dev={0xac, 0x14, 0x14, 0x43}, 0xce}, {@loopback, 0x4}, {@local, 0xe}, {@empty, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@dev={0xac, 0x14, 0x14, 0x20}, 0x109}, {@rand_addr=0x64010100, 0x5}]}, @noop, @timestamp={0x44, 0x1c, 0x8c, 0x0, 0x4, [0xa2, 0x3, 0x6, 0xfffff000, 0x5e5fbb86, 0x7]}, @timestamp_addr={0x44, 0x14, 0xab, 0x1, 0x2, [{@empty, 0x7}, {@dev={0xac, 0x14, 0x14, 0x3a}, 0x8}]}, @timestamp_addr={0x44, 0x34, 0x6e, 0x1, 0x4, [{@empty, 0x975d}, {@dev={0xac, 0x14, 0x14, 0x27}, 0x6}, {@multicast2, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x1ff}, {@rand_addr=0x64010101, 0x9}]}, @noop, @timestamp={0x44, 0x10, 0x49, 0x0, 0x3, [0x200, 0x1, 0xf]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000680)={'vxcan1\x00'}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) 2.811478113s ago: executing program 0 (id=1341): socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848360000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[], 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r1}, 0x18) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) sendmmsg$sock(r3, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a0fd0d86729b5f4b9a01fb336bef1be8a68a628452b83a7404087d4bcb64f6ecad05459d12595d5b8b2657f2f29656a15e5a18e3168946dcb5faa59f7b404bad393ba06734d170b0513aeb0d051", 0xd5}, {&(0x7f00000004c0)="62c99e05d98775ed1beb5d67431ead896f7060f03e5b8671b283168d0df1573bef271f3a22b9cac06e27c7e87b34a19188d3e10e670bc070f0d3eb88d2f891d242747e0deec4a10609b12d4058b0fbff28bb01e6e49b533b03b11288ff4da1ab3226a2e3ba5fc47969142f1a1a0ca9ba4cece2ac9a5fcd89343de7e57dfcbb6216499555bd04f2fcb91c3c6c72868a3797ec63f8138ab74b5034878812df8b0445704cb33f81bffed93c3e645a206db134f626a59f4fac53fbf23489cf2f45d05d735e64033376671da045df97bcb989bda1d17ba14afbfd19e32a8222ebf934c17fed237b86aef2e830", 0xea}, {&(0x7f00000005c0)="f2b314c96d500b66f7fd46493862d9eb11d188464208592330ac482436286448", 0x20000}], 0x3}}], 0x1, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000952906f3ef3b89b33b000000000000000000611210000700080000000000000000007c3cbe99dc577957ad8b5904e1b533cf0ef91e487e85f3de24327b6a9515fc845c50ce3bb568349ea0070a1e880078ec08ad9945cdff81a1820e5d93b5afc872164ed5d1f447b3bc8c8b62b2b073a721da432e02f9b69035b96ab0711ae7939020a322"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)='\b', 0x1, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) unshare(0x62040200) socket(0x1, 0x803, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000a80)={@ifindex, 0xffffffffffffffff, 0x19, 0x2000, 0xffffffffffffffff, @value}, 0x20) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) 2.685661146s ago: executing program 2 (id=1342): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001640)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f42fc3199f000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af735ed41793bdf9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbc68223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f00001000000000eeff7c5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729eec082830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d424c14283a94395b64645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d620100000000000000494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd779a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9b0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a0000000000000000000000000000002684c2d8eb8cac98930fa6a893ca44c0f64c07a87eb7b05f56ca6c70cb3a0eb328a15fe96a88235155e6d64bd434f641ddf9db2245e47e5904453577895dd81d"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) unshare(0x40020000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001580)=ANY=[@ANYBLOB="3c00000010003b150000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008001c00", @ANYRES32=r2], 0x3c}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(r3, &(0x7f0000002a80), 0x0, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000040)={0x84}, 0x8) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r4, 0x58}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f00000000c0)=@add_del={0x2, 0x0}) ioctl$sock_SIOCSIFBR(r7, 0x8941, &(0x7f00000000c0)=@add_del={0x3, &(0x7f0000000080)='nr0\x00'}) sendmsg$TIPC_CMD_SET_LINK_TOL(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r6, 0x1, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x8d0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) socket(0x23, 0x5, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r8, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r9 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r10) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c8, &(0x7f0000000340)={r8, r8, 0x8, 0x1, &(0x7f0000000400)="e6", 0x9, 0x1, 0x7c0, 0x6e6, 0x8b, 0x2, 0x7, 'syz1\x00'}) 2.583825955s ago: executing program 3 (id=1343): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x20, r0, 0x9, 0x70bd2a, 0xfffffffe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x20}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0xb, 0xfb6}) connect$802154_dgram(r7, &(0x7f0000000380)={0x24, @none={0x0, 0x1}}, 0x14) pselect6(0x40, &(0x7f0000000000)={0x6, 0x2, 0x6, 0x9, 0x9, 0x2, 0x1, 0x4}, 0x0, &(0x7f0000000180)={0x4, 0x0, 0x81, 0x3, 0x42, 0x2, 0x5, 0xd0c4}, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x28, r8, 0x73976972ba3f4b55, 0x0, 0x0, {0x8}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}]}, 0x28}}, 0x0) r9 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet(r9, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x4e21, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x7, 0x4, [@remote]}]}}}, @ip_tos_u8={{0x11}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}], 0x48}, 0x0) r10 = socket$nl_rdma(0x10, 0x3, 0x14) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0xa, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r11, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x1c, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d) sendmsg$RDMA_NLDEV_CMD_DELLINK(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="200000000414030828bd7000fedbdf250a000100"], 0x20}, 0x1, 0x0, 0x0, 0x4080}, 0x8044) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xff80, &(0x7f0000000000)=@framed={{0x18, 0x8}, [@tail_call={{}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$vsock_stream(0x28, 0x1, 0x0) 1.814803363s ago: executing program 1 (id=1351): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000007400", @ANYRES32=r1, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800600270000"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) 1.60722896s ago: executing program 4 (id=1352): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200), 0x0) recvmmsg(r2, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/48, 0x30}], 0x1}, 0x80000001}], 0x1, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x9, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffff8}, {}, {0x7, 0x0, 0xb, 0x7}}, @generic={0x7, 0x2, 0xd, 0x6}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'syztnl2\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x20, 0x80, 0x9, 0x0, {{0x3d, 0x4, 0x2, 0x8, 0xf4, 0x65, 0x0, 0x81, 0x2f, 0x0, @local, @loopback, {[@generic={0x82, 0x4, "b438"}, @lsrr={0x83, 0x7, 0x8d, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_addr={0x44, 0x14, 0x33, 0x1, 0xc, [{@rand_addr=0x64010102, 0x10}, {@remote, 0x4}]}, @cipso={0x86, 0x4b, 0x1, [{0x0, 0xc, "6aed90dcdcbeae4b9ca7"}, {0x6, 0x7, "503eb7b4a2"}, {0x7, 0xc, "61945f6609d1ebcbea70"}, {0x5, 0x10, "7430ff776380e0d759265ffb2bf6"}, {0x1, 0xf, "a3b4379de2ed0c0a4ebc5c69de"}, {0x6, 0x7, "0cbba3366f"}]}, @cipso={0x86, 0x10, 0x1, [{0x1, 0xa, "c29e143a7208e174"}]}, @noop, @cipso={0x86, 0x65, 0x0, [{0x2, 0xe, "8af9e3d6719a74bb9b4ba13d"}, {0x7, 0x10, "9de845bc2b85d7b3db21d3fa8840"}, {0x7, 0xd, "f69cffdaaff01b3c968e16"}, {0x7, 0xe, "5690bae7d1d45cfea1f21f1f"}, {0x2, 0x12, "5a2817dbe3d1b0a577020d24ff51c2b1"}, {0x6, 0xc, "89c88104f4f8fccbcb1a"}, {0x7, 0x8, "056c1d5891d3"}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000280)={'ip6tnl0\x00', 0x0, 0x29, 0x3, 0x6, 0x8, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, 0x1, 0x8000, 0x8, 0x6}}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r7) sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010027bd7000fbdbdf250100000008000100030000002c00048005000300e1ffffff04000300000000814100030002000000050003000000000005000300020000000800020002"], 0x50}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0xc3, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000800)={&(0x7f00000007c0)='ext4_fc_replay\x00', r4}, 0x18) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000340)={@local}, &(0x7f0000000380)=0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000480)={'syztnl2\x00', &(0x7f00000003c0)={'syztnl1\x00', 0x0, 0x20, 0x700, 0xffffffff, 0x7bfe, {{0x1d, 0x4, 0x1, 0x23, 0x74, 0x66, 0x0, 0x3, 0x2f, 0x0, @empty, @private=0xa010100, {[@timestamp_addr={0x44, 0x54, 0x1c, 0x1, 0x2, [{@broadcast, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@remote, 0x4}, {@dev={0xac, 0x14, 0x14, 0x36}, 0xa}, {@private=0xa010102, 0x70}, {@local, 0x8853}, {@loopback, 0xff}, {@multicast2, 0x8}, {@multicast1, 0x9}, {@private=0xa010102}]}, @noop, @rr={0x7, 0x7, 0x3c, [@broadcast]}, @end]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'gretap0\x00', &(0x7f00000004c0)={'gretap0\x00', 0x0, 0xb763d99132c1a11d, 0x40, 0x5, 0x200, {{0x51, 0x4, 0x0, 0x3, 0x144, 0x66, 0x0, 0x10, 0x2f, 0x0, @rand_addr=0x64010100, @multicast2, {[@timestamp_addr={0x44, 0x54, 0x5a, 0x1, 0x5, [{@dev={0xac, 0x14, 0x14, 0x16}, 0x101}, {@empty, 0x1a32}, {@rand_addr=0x64010102}, {@empty, 0xfffffffd}, {@empty, 0x7}, {@empty, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@broadcast, 0x6}, {@local, 0x10001}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}]}, @rr={0x7, 0xb, 0xea, [@rand_addr=0x64010102, @rand_addr=0x64010102]}, @timestamp={0x44, 0x1c, 0xbe, 0x0, 0x2, [0x9, 0xb79, 0x4, 0x8, 0xfffffff5, 0x4990c96e]}, @timestamp_addr={0x44, 0x3c, 0x46, 0x1, 0xe, [{@dev={0xac, 0x14, 0x14, 0x43}, 0xce}, {@loopback, 0x4}, {@local, 0xe}, {@empty, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@dev={0xac, 0x14, 0x14, 0x20}, 0x109}, {@rand_addr=0x64010100, 0x5}]}, @noop, @timestamp={0x44, 0x1c, 0x8c, 0x0, 0x4, [0xa2, 0x3, 0x6, 0xfffff000, 0x5e5fbb86, 0x7]}, @timestamp_addr={0x44, 0x14, 0xab, 0x1, 0x2, [{@empty, 0x7}, {@dev={0xac, 0x14, 0x14, 0x3a}, 0x8}]}, @timestamp_addr={0x44, 0x34, 0x6e, 0x1, 0x4, [{@empty, 0x975d}, {@dev={0xac, 0x14, 0x14, 0x27}, 0x6}, {@multicast2, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x1ff}, {@rand_addr=0x64010101, 0x9}]}, @noop, @timestamp={0x44, 0x10, 0x49, 0x0, 0x3, [0x200, 0x1, 0xf]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000680)={'vxcan1\x00'}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) 1.541636937s ago: executing program 1 (id=1353): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/mnt\x00') (async, rerun: 32) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) (rerun: 32) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x4, @loopback, 0xe}], 0x1c) (async) sendto$inet6(r1, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000280)={0x0, 0xb}, 0x8) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) (async) r2 = socket(0x9, 0x80000, 0x0) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f00000001c0)=0x3ff, 0x4) (async) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x9}, 0xc) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0xfffffffffffffe4e, [@int={0xe, 0x0, 0x0, 0x1, 0x0, 0x73, 0x0, 0x4, 0x2}, @float={0xf, 0x0, 0x0, 0x10, 0x10}]}, {0x0, [0x30, 0x5f]}}, &(0x7f0000000280)=""/13, 0x38, 0xd, 0x0, 0xea06, 0x10000, @value}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r3, @ANYBLOB="e600000000000000000000000000000000007500", @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="05000000010000000400"/28], 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0100000004001000040000000500000001000000", @ANYRES32, @ANYBLOB="000000000000000000000000007d6c939f000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000001940), 0x2000cc0, r5}, 0x38) (async) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r5}, 0x38) (async) syz_emit_ethernet(0x6a, &(0x7f0000000280)=ANY=[], 0x0) (async) unshare(0x62040200) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x3a) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) sendmmsg$inet(r6, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) (async) r7 = socket$kcm(0xa, 0x6, 0x0) (async, rerun: 64) r8 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="8b04040000000000000012800b00010065727370616e0000180002800400120006001815900000000600000002000000"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40000) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000007c0)='memory.events\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r7, 0x10d, 0xa, &(0x7f0000000000)=r9, 0x4) socket$pppl2tp(0x18, 0x1, 0x1) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9c79077fa15ba36eca61299de54cf77c9062c30bc068829afff36b31fa7e358e95cfa"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000200)={r10, 0x2000000, 0x13, 0x0, &(0x7f00000003c0)="13435cd378c66a90bd307e0add6affff1fc42f", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.541327268s ago: executing program 3 (id=1354): socket$unix(0x1, 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="54010000100013070000000002000000ac1414bb000000000000000000000000ac1e0001000000000000200000009000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff0200000000000000000000000000010000000032000000000000000000000014000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009000000000000000000000000000000000000000000000009000000000000000000000000000000000000000000000000000000020004fe000000000000000048000200656362286369706865725f6e756c6c2900"/198], 0x154}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) recvmsg(r0, &(0x7f00000005c0)={&(0x7f0000000180)=@caif=@dbg, 0x80, &(0x7f0000000480)=[{&(0x7f0000000200)=""/60, 0x3c}, {&(0x7f0000000f00)=""/4096, 0x1000}, {&(0x7f0000000240)}, {&(0x7f0000001f00)=""/4096, 0x1000}, {&(0x7f0000000380)=""/201, 0xc9}, {&(0x7f0000002f00)=""/4096, 0x1000}], 0x6, &(0x7f0000000500)=""/134, 0x86}, 0x120) 1.263352527s ago: executing program 4 (id=1355): r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @none}, &(0x7f0000000040)=0xe, 0x800) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'syz_tun\x00', 0x2000}) clock_gettime(0x0, &(0x7f00000014c0)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000001480)=[{{&(0x7f00000000c0)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000001340)=[{&(0x7f0000000140)=""/69, 0x45}, {&(0x7f00000001c0)=""/52, 0x34}, {&(0x7f0000000200)=""/199, 0xc7}, {&(0x7f0000000300)=""/31, 0x1f}, {&(0x7f0000000340)=""/4096, 0x1000}], 0x5, &(0x7f00000013c0)=""/143, 0x8f}}], 0x1, 0x12041, &(0x7f0000001500)={r1, r2+60000000}) shutdown(r0, 0x1) sendto(0xffffffffffffffff, &(0x7f0000001540)="36bd06755b4c1e3f6d5382056c52ba9320f726d8c50d4a56284401eb579d3fae1d2b9f1b8c675d58a7bce0a0c2e404b0a05bf8f415514f681d9e200447de979935a42947fe78b2a3f7acc4893f8624729645c9bcc35db15db4592c9c421e5bd2347751d4aa26a22d05df980552b0c9dc3f2ecb", 0x73, 0x10, &(0x7f00000015c0)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4}, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x80) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000001640)={0x3000, {{0xa, 0x4e20, 0x1, @local, 0x8}}, {{0xa, 0x4e23, 0x2, @loopback, 0x5}}}, 0x108) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000001780)={0x72910527, {{0xa, 0x4e23, 0x10001, @loopback, 0xa}}, {{0xa, 0x4e22, 0x6, @dev={0xfe, 0x80, '\x00', 0x37}, 0x8}}}, 0x108) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000018c0), &(0x7f0000001900)=0xc) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001980), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000001f80)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001f40)={&(0x7f00000019c0)={0x570, r5, 0x10, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0xf}}}}, [@NL80211_ATTR_TX_RATES={0x2c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7f, 0x1, 0x1, 0x0, 0x2, 0xf, 0x8, 0x9]}}]}]}, @NL80211_ATTR_TX_RATES={0x110, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x40, 0x8c, 0xdd, 0x1, 0x43d0, 0x10, 0x1, 0x1]}}]}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x60, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x3, 0xa9, 0x1ff, 0x4, 0x0, 0x3, 0x2]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x426, 0x3, 0x8, 0x55, 0xff, 0x9, 0x4, 0x3]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x4, 0xfff8, 0x8, 0x40, 0x1, 0x5, 0x2]}}]}, @NL80211_BAND_60GHZ={0x80, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x6, 0x7, 0x9, 0x5, 0xf5, 0x9b59, 0x3800]}}, @NL80211_TXRATE_HT={0x3f, 0x2, [{0x0, 0x7}, {0x7, 0x2}, {0x7, 0x3}, {0x4, 0x7}, {0x3, 0x7}, {0x4, 0x2}, {0x4, 0x6}, {0x0, 0x3}, {0x4, 0x4}, {0x7, 0x1}, {0x2, 0x5}, {0x1, 0x2}, {0x7, 0x7}, {0x2, 0x3}, {0x6, 0x4}, {0x1, 0x2}, {0x5, 0x1}, {0x5, 0x3}, {0x6, 0x2}, {0x0, 0x5}, {0x0, 0x1}, {0x4, 0x3}, {0x2, 0x7}, {0x7, 0x8}, {0x5, 0x9}, {0x5}, {0x6, 0xa}, {0x7, 0x2}, {0x2, 0x4}, {0x4, 0xa}, {0x2, 0x8}, {0x5, 0xa}, {0x3, 0x7}, {0x5}, {0x2, 0x7}, {0x0, 0x9}, {0x7, 0x9}, {0x5, 0x5}, {0x2, 0x5}, {}, {0x6}, {0x3, 0x5}, {0x2, 0x5}, {0x5, 0x9}, {0x3, 0x3}, {}, {0x6, 0x8}, {0x0, 0x9}, {0x1, 0x6}, {0x2, 0x9}, {0x5}, {0x1, 0x6}, {0x0, 0x6}, {0x1, 0x4}, {0x0, 0xa}, {0x7, 0x8}, {0x1, 0x3}, {0x7, 0x8}, {0x7, 0x4}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x134, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0xf8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x4, 0x4}, {0x4, 0x4}, {0x2, 0x7}, {0x0, 0x1}, {0x0, 0x7}, {0x7, 0x1}, {0x1, 0x2}, {0x0, 0x2}, {0x2, 0x5}, {0x7, 0x6}, {0x0, 0x1}, {0x5, 0x9}, {0x6, 0x4}, {0x0, 0x1}, {0x2, 0x4}, {0x3, 0x1}, {0x0, 0x4}, {0x4, 0xa}, {0x2, 0x7}, {0x1, 0x2}, {0x0, 0xa}, {0x5, 0x2}, {0x0, 0x5}, {0x4, 0xa}, {0x1}, {0x4, 0x3}, {0x4, 0x8}, {0x1}, {0x1, 0x2}, {0x0, 0x7}, {0x0, 0x2}, {0x3, 0x2}, {0x1, 0x1}, {0x0, 0x8}, {}, {0x7, 0x6}, {0x1, 0x8}, {0x0, 0x3}, {0x2, 0x5}, {0x1, 0x7}, {0x2, 0x9}, {0x5, 0x5}, {0x7, 0x3}, {0x5, 0x6}, {0x0, 0x5}, {0x4, 0x1}, {0x1, 0x7}, {0x0, 0x4}, {0x4, 0x1}, {0x0, 0x4}, {0x2, 0x3}, {0x7, 0x5}, {0x1, 0xa}, {0x7, 0x8}, {0x2}, {0x5, 0x8}, {0x4, 0x5}, {0x5, 0x8}, {0x5, 0x6}, {0x5, 0x1}, {0x0, 0x8}, {0x1, 0x2}, {0x0, 0x8}, {0x0, 0x4}, {0x1}, {0x0, 0x5}, {0x0, 0x7}, {0x7, 0x4}, {0x7}, {0x1}, {0x7, 0x4}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0xfff, 0x2, 0x3, 0xa, 0x401, 0x9, 0x800]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x50, 0x2, [{0x0, 0x7}, {0x6, 0x8}, {0x1, 0x8}, {0x3, 0x2}, {0x3, 0x5}, {0x7, 0x3}, {}, {0x1, 0x9}, {0x0, 0x6}, {0x6, 0x5}, {0x0, 0x5}, {0x2, 0x9}, {0x1, 0x1}, {0x2, 0x2}, {0x6, 0x8}, {0x5, 0x2}, {0x3, 0xa}, {0x7, 0x4}, {0x1, 0x5}, {0x1}, {0x5, 0x7}, {0x6, 0x7}, {0x4, 0x2}, {0x3, 0x1}, {0x2, 0x4}, {0x5}, {0x2, 0x3}, {0x5, 0x3}, {0x4, 0x8}, {0x6, 0x8}, {0x5, 0x2}, {0x0, 0x4}, {0x4, 0x5}, {0x4, 0xa}, {0x4}, {0x4, 0x6}, {0x6, 0x8}, {0x6, 0x9}, {0x0, 0x2}, {0x6, 0xa}, {0x5, 0x2}, {0x2, 0x5}, {0x3, 0xa}, {0x1}, {0x5}, {0x1, 0x1}, {0x5, 0x7}, {0x6}, {0x4, 0x8}, {0x4, 0x3}, {0x3, 0x5}, {0x0, 0x8}, {0x4}, {}, {0x5, 0x5}, {0x2, 0x3}, {0x3, 0x4}, {0x0, 0x8}, {0x1, 0x1}, {0x4, 0x8}, {0x7, 0x6}, {0x6, 0x6}, {0x2, 0x3}, {0x2, 0x6}, {0x3, 0xa}, {0x4, 0x8}, {0x3, 0x5}, {0x2, 0x8}, {0x1, 0x1}, {0x1}, {0x0, 0x7}, {0x1, 0x6}, {0x5, 0x4}, {0x7, 0x3}, {0x5, 0x2}, {0x7}]}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x5, 0x6}, {0x0, 0x3}, {0x3, 0xa}, {0x4, 0x7}, {0x1, 0x4}, {0x1, 0x8}, {0x1}, {0x5, 0x7}, {0x2, 0x4}, {0x3, 0x2}, {0x7, 0xa}, {0x3, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2ac6, 0x0, 0x4, 0x1, 0x1, 0x1000, 0x8]}}]}, @NL80211_BAND_2GHZ={0x24, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x20, 0x1, [0x33909c71d2846965, 0x18, 0x6, 0x6, 0x48, 0x24, 0x0, 0x6, 0x16, 0x9, 0x1, 0x60, 0x2, 0x48, 0x4, 0x48, 0x24, 0x9, 0x1, 0x4c786072bc6ea00f, 0x2, 0x24, 0xb, 0x18, 0x2, 0x9, 0x5, 0x48]}]}]}, @NL80211_ATTR_TX_RATES={0x4}, @NL80211_ATTR_TX_RATES={0x2d4, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x78, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x41, 0x2, [{0x5, 0x5}, {0x7, 0x4}, {}, {0x3, 0x1}, {0x0, 0x6}, {0x7, 0x8}, {0x1, 0xa}, {0x7, 0x1}, {0x5, 0x8}, {0x1}, {0x5, 0x1}, {0x0, 0x8}, {0x5, 0xa}, {0x5, 0x8}, {0x7, 0x7}, {0x1, 0x6}, {0x3}, {0x5, 0x7}, {0x3, 0x2}, {0x5, 0x6}, {0x0, 0x7}, {0x7, 0x2}, {0x5, 0x1}, {0x0, 0xa}, {0x4, 0x6}, {0x0, 0x9}, {0x7, 0x3}, {0x0, 0x4}, {0x3, 0x1}, {0x0, 0x4}, {0x7}, {}, {0x2, 0x4}, {0x7, 0x3}, {0x4, 0xa}, {0x6, 0x6}, {0x1}, {0x2, 0x4}, {0x3, 0xa}, {0x5, 0xa}, {0x7, 0x8}, {0x1, 0x7}, {0x0, 0xa}, {0x0, 0x8}, {0x1, 0x5}, {0x7, 0x6}, {0x4, 0x7}, {0x0, 0x1}, {0x7}, {0x5, 0x7}, {0x1, 0x5}, {0x7, 0x6}, {0x3, 0x1}, {0x0, 0xa}, {0x7, 0x5}, {0x1, 0x5}, {0x7, 0x7}, {0x6, 0x8}, {0x1, 0xa}, {0x6, 0xa}, {0x1, 0x3}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x2, 0x9, 0x16, 0x8, 0x16, 0x48, 0xb, 0x71b6bcce237500ee, 0x16, 0x36, 0xb, 0x3d, 0x0, 0xc, 0x1b, 0x9]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x81, 0x5, 0xf683, 0xaf00, 0xacf0, 0xb, 0x200, 0x9]}}]}, @NL80211_BAND_6GHZ={0x12c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x4}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x7, 0x3}, {0x7, 0x3}, {0x0, 0x5}, {0x5, 0x9}, {0x4, 0x1}, {0x2, 0x6}, {0x1, 0x6}, {0x5, 0x6}, {0x7, 0x2}, {0x1, 0x9}, {0x3, 0x5}, {0x1, 0xa}, {0x0, 0x3}, {0x4, 0x3}, {0x7, 0x2}, {0x1, 0x6}, {0x5, 0x5}, {0x6, 0x2}, {0x1}, {0x2, 0x3}, {0x1, 0x8}, {0x2, 0x8}, {0x6, 0x7}, {0x0, 0x3}, {0x1, 0x7}, {0x1, 0x5}, {0x5}, {0x1}, {0x1, 0x1}, {0x3, 0x2}, {0x4, 0x1}, {0x3, 0x1}, {0x3, 0x3}, {0x0, 0x3}, {0x0, 0x7}, {0x2, 0x4}, {0x4, 0x1}, {0x3, 0x4}, {0x3, 0x7}, {0x4, 0xa}, {0x4}, {0x3}, {0x4, 0x2}, {0x0, 0x5}, {0x3, 0x1}, {0x5, 0x5}, {0x0, 0x9}, {0x6, 0x8}, {0x1, 0x7}, {0x5, 0x6}, {0x3, 0x3}, {0x0, 0x5}, {0x7, 0x5}, {0x0, 0x3}, {0x3, 0x2}, {0x2, 0x6}, {0x5}, {0x3, 0x1}, {0x0, 0x5}, {0x2, 0xa}, {0x1, 0x12}, {0x7, 0x8}, {0x0, 0x4}, {0x6, 0x4}, {0x1, 0x5}, {0x3, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0xfff, 0xc, 0x800, 0x6, 0x1, 0x3, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x85, 0x6, 0x7ff, 0x8, 0xbd, 0x8, 0x7, 0x5]}}, @NL80211_TXRATE_HT={0x2b, 0x2, [{}, {0x0, 0x3}, {0x2, 0x3}, {0x7, 0x2}, {0x4, 0xa}, {0x5, 0x1}, {0x4, 0x1}, {0x1, 0x7}, {0x7, 0x4}, {0x2, 0x7}, {0x6}, {}, {0x1, 0x5}, {0x3, 0x9}, {0x1, 0x3}, {0x1}, {0x6, 0x7}, {0x3, 0x5}, {0x0, 0x4}, {0x1, 0x9}, {0x6, 0x6}, {0x0, 0x2}, {0x0, 0x8}, {0x3, 0x5}, {0x2, 0xa}, {0x7, 0xa}, {0x7, 0x5}, {0x2, 0x5}, {0x6}, {0x0, 0x3}, {0x0, 0x6}, {0x7, 0x2}, {0x6, 0x2}, {0x4, 0xa}, {0x0, 0x2}, {0x4}, {0x3, 0xa}, {0x7, 0x5}, {0x4, 0xa}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x9, 0x30, 0x24, 0x48, 0x3d, 0x48, 0x6, 0x16, 0x36, 0x3, 0x18, 0x6d, 0x4, 0x60, 0x16, 0x12, 0x4, 0x9, 0x12, 0x6c, 0xb, 0xc, 0x28, 0x1d]}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x1}, {0x2, 0x5}, {0x0, 0x2}, {0x7, 0x5}, {0x7, 0x2}, {0x5, 0x9}, {0x5, 0x3}, {0x1, 0x9}]}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x4, 0x2}, {0x6, 0x9}, {0x4, 0x8}, {0x5}, {0x1, 0x2}, {0x0, 0x9}, {0x7, 0x2}, {0x6, 0x7}, {0x0, 0x6}, {0x6}, {0x5, 0x8}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x7}, {0x5}, {0x0, 0x3}, {0x0, 0x4}, {0x0, 0x8}, {0x7, 0x5}, {0x1, 0x3}, {0x7, 0x2}, {0x5, 0x8}, {0x7, 0x8}, {0x1}, {0x7, 0x9}, {0x0, 0x8}, {}, {0x5, 0x6}, {0x1, 0x8}, {0x5}, {0x2, 0x2}, {0x5}, {0x1, 0xa}, {0x5, 0x2}, {0x2, 0x1}, {0x6, 0x1}, {0x4, 0xa}, {0x1, 0x6}, {0x5, 0x8}, {0x2, 0x1}, {0x0, 0x6}, {0x3, 0x6}, {0x3, 0x2}, {0x5, 0xa}, {0x0, 0x7}, {0x6, 0xa}, {0x3, 0x1}, {}, {0x7, 0x6}, {0x6}, {0x4, 0x7}, {0x6, 0x7}, {0x3, 0x9}, {0x2, 0x6}, {0x2}, {0x4, 0x2}, {0x3, 0x1}, {0x6, 0x9}, {0x1, 0xa}, {0x4, 0x6}, {0x0, 0x7}, {0x7, 0x9}, {0x5, 0x2}, {0x1, 0x3}, {0x1, 0x1}, {0x2, 0x5}, {0x5, 0x9}, {0x5, 0x8}, {0x1, 0x9}, {0x0, 0x9}, {0x1, 0x3}, {0x7, 0x5}, {0x7, 0x9}, {0x6, 0x9}, {0x7, 0xa}, {0x3, 0x1}, {0x2, 0x5}]}]}, @NL80211_BAND_60GHZ={0x94, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x81, 0x8, 0x1, 0x85bd, 0x9, 0xfffe, 0x2]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x4, 0x5}, {0x4, 0x7}, {0x0, 0x7}, {0x6, 0x4}, {0x1, 0x1}, {0x3, 0x4}, {0x1, 0x6}, {0x7, 0x8}, {0x5, 0x7}, {0x6, 0x2}, {0x3, 0x8}, {0x3, 0x8}, {0x3, 0x2}, {0x3, 0x3}, {0x6, 0xa}, {0x0, 0x2}, {0x0, 0x7}, {0x1, 0x2}, {0x3, 0xa}, {0x5}, {0x2, 0x1}, {0x0, 0x4}, {0x6, 0x3}, {0x1, 0x3}, {0x1, 0x2}, {0x7, 0x1}, {0x3, 0x7}, {0x1, 0x1}, {0x6, 0xa}, {0x6, 0xa}, {0x1, 0x2}, {0x6, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x7}, {0x6, 0x9}, {0x0, 0x2}, {0x6, 0x2}, {0x2}, {0x0, 0x5}, {0x2, 0x9}]}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x60, 0x30, 0x4, 0x32, 0x5, 0x6, 0x24, 0x6c, 0x16, 0xb, 0x18, 0x9, 0x60, 0xb, 0x4]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0xd, 0x2, [{}, {0x7, 0x8}, {0x3, 0x9}, {0x5, 0x6}, {0x1, 0x5}, {0x0, 0x8}, {0x7, 0x4}, {0x2, 0x9}, {0x6, 0x6}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x24, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x1b, 0x5, 0xc, 0x24, 0x16, 0x9, 0x1b, 0x60, 0x3, 0x18, 0x3, 0x16, 0x12, 0x36, 0x2, 0xc, 0x5, 0x30, 0x36, 0x9]}]}, @NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xffff, 0x1, 0x6, 0x799, 0x3, 0x7, 0x0, 0x5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x70, 0xff, 0x10, 0x5, 0xc000, 0x3, 0x197, 0x5c]}}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x30, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2b, 0x2, [{0x6, 0x1}, {0x4, 0x7}, {0x0, 0x5}, {0x7, 0x5}, {0x0, 0x5}, {0x0, 0x3}, {0x7, 0x8}, {0x2, 0xa}, {0x5, 0x1}, {0x1, 0x7}, {0x2, 0x2}, {0x5}, {0x6, 0x2}, {0x4, 0x2}, {0x6, 0xa}, {0x4, 0x2}, {0x4, 0x2}, {0x5, 0x1}, {0x0, 0x9}, {0x1, 0x3}, {0x4, 0x6}, {0x2}, {0x5, 0x6}, {0x0, 0x1}, {0x6, 0xa}, {0x4, 0xa}, {0x7, 0x2}, {0x0, 0x8}, {0x4, 0x6}, {0x1, 0x2}, {0x5, 0x1}, {0x7, 0xa}, {0x7}, {0x6, 0x5}, {0x2, 0xa}, {0x7, 0x6}, {0x6, 0xa}, {0x0, 0x5}, {0x3, 0x1}]}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}]}]}, 0x570}, 0x1, 0x0, 0x0, 0x20004040}, 0x1) sendto(0xffffffffffffffff, &(0x7f0000001fc0)="faf80e867eb194c06205024d", 0xc, 0x40004, 0x0, 0x0) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000002040), 0xffffffffffffffff) sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000002140)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002100)={&(0x7f0000002080)={0x68, r6, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@SEG6_ATTR_DST={0x14, 0x1, @private1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_DST={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x90}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xfffff1eb}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xfa}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x0]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4008094}, 0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000002180)={'batadv0\x00', 0x0}) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f00000021c0)={@remote, r7}, 0x14) sendmsg$NL80211_CMD_START_P2P_DEVICE(r3, &(0x7f00000022c0)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002280)={&(0x7f0000002240)={0x14, r5, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, ["", ""]}, 0x14}}, 0x40050) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000002300)=[{{0x1, 0x1, 0x1}, {0x4}}, {{0x4, 0x1, 0x0, 0x1}, {0x4, 0x1, 0x1}}, {{0x4, 0x1, 0x1}, {0x0, 0x1}}, {{0x2}, {0x4, 0x1, 0x0, 0x1}}, {{0x1, 0x0, 0x1}, {0x2}}, {{0x2}, {0x7f, 0x1}}, {{0x1, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x2, 0x1, 0x1}, {0x4, 0x0, 0x0, 0x1}}, {{0x3, 0x0, 0x1, 0x1}, {0x4, 0x1, 0x1}}], 0x48) pipe(&(0x7f0000002380)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002400), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(r8, &(0x7f00000024c0)={&(0x7f00000023c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002480)={&(0x7f0000002440)={0x14, r10, 0x10, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x800) socket(0x29, 0x1, 0x7) socket$inet6_dccp(0xa, 0x6, 0x0) r11 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000002500)={'wlan1\x00'}) sendmsg$DEVLINK_CMD_RATE_DEL(r9, &(0x7f0000002640)={&(0x7f0000002540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002600)={&(0x7f0000002580)={0x7c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x7c}, 0x1, 0x0, 0x0, 0x48090}, 0x8000) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000002680)={0x0, @in={{0x2, 0x4e23, @multicast1}}, 0x4, 0x4}, &(0x7f0000002740)=0x90) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f0000002780)={r12, 0x6ad}, &(0x7f00000027c0)=0x8) 1.031922928s ago: executing program 1 (id=1356): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x1}, 0x8) sendto$inet(r0, &(0x7f0000000080)="ab", 0x1, 0x4004815, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) 918.382454ms ago: executing program 4 (id=1357): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) socket(0x18, 0x800, 0x877) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000400000000020000000600000008000300", @ANYRES32=r2, @ANYBLOB="0500530001000000e6ce8a140711900496766ab099d88934dc086b860d0917006118959fd596ce470040e2b33b8e8202c18255178bdc965694f2b3943881e569dfd917f4a4d4c0b2e6b168aa0ec03cdab32287e33ff2eedf237d4370bfe066ba33ff75c59c681140074f36fa2c189a9c56f75bb998eb54365cdf9f9aec7136a21d5bf5055b488177096cebf327a105b27107b0098b04f7099c92e938d6214da6c3e62cf8cee193244852f86b7e6f700eac9f76742dd38beba4f97136c17c6670"], 0x24}, 0x1, 0x0, 0x0, 0x4044001}, 0x1) 885.945718ms ago: executing program 1 (id=1358): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00T\x00=\t\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00', @ANYRES32=r2, @ANYBLOB, @ANYRES32=r2, @ANYBLOB="00030000ff02000000000000fc0000"], 0x38}}, 0x0) 775.64297ms ago: executing program 4 (id=1359): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=ANY=[@ANYBLOB="7c00000010000305020400010000000000000000", @ANYRES32=0x0, @ANYBLOB="04800000000000005c0012800b00010065727370616e00004c000280060010004e21000008000100", @ANYRES32=0x0, @ANYBLOB="08b2000000000000000002037ee4b45afb87abc9000400009e750014000777ff25ea05000a000100000005004617000100"/62], 0x7c}}, 0x0) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000080)='cpuset\x00'}, 0x30) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) pread64(r3, &(0x7f00000011c0)=""/99, 0x63, 0x2) r4 = socket$qrtr(0x2a, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) ioctl$F2FS_IOC_DECOMPRESS_FILE(r1, 0xf517, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000001000000300001801400040000000000000000000000000000000001060001000a000000060005000000000008000700", @ANYRES32=0x0, @ANYBLOB="9d"], 0x44}}, 0x0) r7 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x14, 0x3f8, 0x800, 0x70bd29, 0x25dfdbff, "808e76"}, 0x14}, 0x1, 0x0, 0x0, 0x40051}, 0x44000) connect$qrtr(r4, &(0x7f0000000040)={0x2a, 0x2, 0x7fff}, 0xc) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001180)=ANY=[@ANYBLOB="300000002000010000000000000000000200000000000000000000000c00144000000000000000000500130001"], 0x30}}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="880000000314000129bd7000ffdbdf250900020073797a300000000008004100736977001400330076657468305f746f5f626174616476000900020073797a31000000000800410072060000000000000072300000000000000000000000000200000000000000310000000008004100727865001400330076657468315f766c616e000000080000"], 0x88}, 0x1, 0x0, 0x0, 0x48000}, 0x8900) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f00000005c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x560, 0x1b8, 0x2a8, 0x1b8, 0x2a8, 0x2a8, 0x490, 0x490, 0x490, 0x490, 0x490, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@remote}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'ip_vti0\x00', 'veth0\x00'}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@loopback, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c0) bind$qrtr(r4, &(0x7f00000000c0)={0x2a, 0x4, 0x4000}, 0xc) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000040)=@ipv4_delrule={0x24, 0x21, 0x403, 0x80000200, 0x0, {0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, [@FRA_GENERIC_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e24, 0x4e26}}]}, 0x24}}, 0x80) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000080002000100000008000100000000003400048005000300000000000500030000000000050003000000000005000300080000000500030000000000100003000000000004000880"], 0x5c}}, 0x0) 773.381418ms ago: executing program 0 (id=1360): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001d80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 724.555502ms ago: executing program 1 (id=1361): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x30, 0x4, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x845}, 0x20000000) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x308, 0x0, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x496f}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2c000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7655}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xcf}]}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NODE={0x12c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x86, 0x3, "4865cd1c8d59b6b6f591fd3c6bf01de03265e8bd48ac27ac0771500bc3fa5643f4b7e198c9f25d77c6d44102dbbd61c0ace80031d1d98674eb2bf507c1e701c44c7ca5b8442d6a611995a1da6fe9d0d01811f7320a366089983fb772cd46d5ab06518a693f0070e2bc6def4ad70c97460ea3ebda72054c3700e45e7fb5597cd462b8"}, @TIPC_NLA_NODE_ID={0x9c, 0x3, "1c75b9e33b11f8fd392b78f5ab4a9ae729d3d46fc96f46da51a634808f8b1d5d3f1a08bb7d3d4da4fe95f67db4bbbd03d5aeccc88d0787089f3e8149a2dc3d82e1cc2add94a393f1447dd04f834c90707d876742198452a87eba2b849eed9a0d858cf1c66fa7d537966170a868fc6347a0d485632a51dd28720c94034d698094392c955d87046156c77dee615a89c75916b7931b96b2ee33"}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffffff01}]}, @TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xa}}}, {0x14, 0x2, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xe}}}}}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_NODE={0x78, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfeb3}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "4870f9e0a348661742bb26080a4a2343c80b2ff317182d4aedc197789dd94d2d70c13b"}}]}]}, 0x308}, 0x1, 0x0, 0x0, 0x841}, 0x840) 715.673728ms ago: executing program 0 (id=1362): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x20008000) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x4c, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @rand_addr=0x64010100}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x810}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x40) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x40, r2, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x40}}, 0x0) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f0000000200)='cpu.weight.nice\x00', 0x2, 0x0) sendfile(r8, r8, 0x0, 0x40000000000004) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_ro(r9, &(0x7f0000000380)='memory.stat\x00', 0x0, 0x0) pread64(r10, &(0x7f0000001ac0)=""/4084, 0xff4, 0x3) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) r12 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r12, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r12, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r11, 0x84, 0x18, &(0x7f0000000280)={r13, 0x30}, 0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r10, 0x84, 0x6, &(0x7f00000003c0)={r13, @in6={{0xa, 0x4e23, 0x5, @mcast1, 0xffff}}}, &(0x7f00000000c0)=0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @empty}], 0x1c) sendto$inet6(r0, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYRES16=0x0], 0xa) 597.549534ms ago: executing program 3 (id=1363): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000007400", @ANYRES32=r1, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800600270000"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) 596.6802ms ago: executing program 1 (id=1364): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$packet_tx_ring(r0, 0x107, 0xd, 0x0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000000)={'erspan0\x00', &(0x7f0000000380)={'gretap0\x00', 0x0, 0x40, 0x7, 0x3, 0x200, {{0x1a, 0x4, 0x3, 0x21, 0x68, 0x64, 0x0, 0x35, 0x2f, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x44}, {[@cipso={0x86, 0x12, 0x1, [{0x0, 0x4, "ed89"}, {0x5, 0x8, "0a5301d81553"}]}, @cipso={0x86, 0x3a, 0x3, [{0x0, 0xd, "53f2dffd2688559e44279f"}, {0x5, 0xf, "3a52b14506a6d191e172ce9660"}, {0x6, 0x8, "6a19eb5f4d95"}, {0x2, 0x6, "4d4b15d9"}, {0x0, 0xa, "d25823f82aac6e30"}]}, @ra={0x94, 0x4}, @noop]}}}}}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r1, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r3}, 0x10) (async, rerun: 64) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) (rerun: 64) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x98a, &(0x7f0000001080)={[0xfffffffffffffffc]}, 0x8) 572.562614ms ago: executing program 4 (id=1365): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200), 0x0) recvmmsg(r2, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/48, 0x30}], 0x1}, 0x80000001}], 0x1, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x9, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffff8}, {}, {0x7, 0x0, 0xb, 0x7}}, @generic={0x7, 0x2, 0xd, 0x6}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'syztnl2\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x20, 0x80, 0x9, 0x0, {{0x3d, 0x4, 0x2, 0x8, 0xf4, 0x65, 0x0, 0x81, 0x2f, 0x0, @local, @loopback, {[@generic={0x82, 0x4, "b438"}, @lsrr={0x83, 0x7, 0x8d, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_addr={0x44, 0x14, 0x33, 0x1, 0xc, [{@rand_addr=0x64010102, 0x10}, {@remote, 0x4}]}, @cipso={0x86, 0x4b, 0x1, [{0x0, 0xc, "6aed90dcdcbeae4b9ca7"}, {0x6, 0x7, "503eb7b4a2"}, {0x7, 0xc, "61945f6609d1ebcbea70"}, {0x5, 0x10, "7430ff776380e0d759265ffb2bf6"}, {0x1, 0xf, "a3b4379de2ed0c0a4ebc5c69de"}, {0x6, 0x7, "0cbba3366f"}]}, @cipso={0x86, 0x10, 0x1, [{0x1, 0xa, "c29e143a7208e174"}]}, @noop, @cipso={0x86, 0x65, 0x0, [{0x2, 0xe, "8af9e3d6719a74bb9b4ba13d"}, {0x7, 0x10, "9de845bc2b85d7b3db21d3fa8840"}, {0x7, 0xd, "f69cffdaaff01b3c968e16"}, {0x7, 0xe, "5690bae7d1d45cfea1f21f1f"}, {0x2, 0x12, "5a2817dbe3d1b0a577020d24ff51c2b1"}, {0x6, 0xc, "89c88104f4f8fccbcb1a"}, {0x7, 0x8, "056c1d5891d3"}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000280)={'ip6tnl0\x00', 0x0, 0x29, 0x3, 0x6, 0x8, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, 0x1, 0x8000, 0x8, 0x6}}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r7) sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010027bd7000fbdbdf250100000008000100030000002c00048005000300e1ffffff04000300000000814100030002000000050003000000000005000300020000000800020002"], 0x50}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0xc3, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000800)={&(0x7f00000007c0)='ext4_fc_replay\x00', r4}, 0x18) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000340)={@local}, &(0x7f0000000380)=0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000480)={'syztnl2\x00', &(0x7f00000003c0)={'syztnl1\x00', 0x0, 0x20, 0x700, 0xffffffff, 0x7bfe, {{0x1d, 0x4, 0x1, 0x23, 0x74, 0x66, 0x0, 0x3, 0x2f, 0x0, @empty, @private=0xa010100, {[@timestamp_addr={0x44, 0x54, 0x1c, 0x1, 0x2, [{@broadcast, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@remote, 0x4}, {@dev={0xac, 0x14, 0x14, 0x36}, 0xa}, {@private=0xa010102, 0x70}, {@local, 0x8853}, {@loopback, 0xff}, {@multicast2, 0x8}, {@multicast1, 0x9}, {@private=0xa010102}]}, @noop, @rr={0x7, 0x7, 0x3c, [@broadcast]}, @end]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'gretap0\x00', &(0x7f00000004c0)={'gretap0\x00', 0x0, 0xb763d99132c1a11d, 0x40, 0x5, 0x200, {{0x51, 0x4, 0x0, 0x3, 0x144, 0x66, 0x0, 0x10, 0x2f, 0x0, @rand_addr=0x64010100, @multicast2, {[@timestamp_addr={0x44, 0x54, 0x5a, 0x1, 0x5, [{@dev={0xac, 0x14, 0x14, 0x16}, 0x101}, {@empty, 0x1a32}, {@rand_addr=0x64010102}, {@empty, 0xfffffffd}, {@empty, 0x7}, {@empty, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@broadcast, 0x6}, {@local, 0x10001}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}]}, @rr={0x7, 0xb, 0xea, [@rand_addr=0x64010102, @rand_addr=0x64010102]}, @timestamp={0x44, 0x1c, 0xbe, 0x0, 0x2, [0x9, 0xb79, 0x4, 0x8, 0xfffffff5, 0x4990c96e]}, @timestamp_addr={0x44, 0x3c, 0x46, 0x1, 0xe, [{@dev={0xac, 0x14, 0x14, 0x43}, 0xce}, {@loopback, 0x4}, {@local, 0xe}, {@empty, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@dev={0xac, 0x14, 0x14, 0x20}, 0x109}, {@rand_addr=0x64010100, 0x5}]}, @noop, @timestamp={0x44, 0x1c, 0x8c, 0x0, 0x4, [0xa2, 0x3, 0x6, 0xfffff000, 0x5e5fbb86, 0x7]}, @timestamp_addr={0x44, 0x14, 0xab, 0x1, 0x2, [{@empty, 0x7}, {@dev={0xac, 0x14, 0x14, 0x3a}, 0x8}]}, @timestamp_addr={0x44, 0x34, 0x6e, 0x1, 0x4, [{@empty, 0x975d}, {@dev={0xac, 0x14, 0x14, 0x27}, 0x6}, {@multicast2, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x1ff}, {@rand_addr=0x64010101, 0x9}]}, @noop, @timestamp={0x44, 0x10, 0x49, 0x0, 0x3, [0x200, 0x1, 0xf]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000680)={'vxcan1\x00'}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) 344.639222ms ago: executing program 2 (id=1366): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0x2, 0x2, 0x0, @void, @value}, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0x0, 0x25, 0x148, 0x108, 0x60, 0x228, 0x2a8, 0x2a8, 0x228, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc0, 0x108, 0x0, {0x200003ae, 0x7f00}, [@inet=@rpfilter={{0x28}, {0x7}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x80, 'syz0\x00', {0xfffffffffffffffd}}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@addrtype={{0x30}, {0x180, 0xe00}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8, 'syz0\x00'}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x320) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r2, @ANYRES32=r3], 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="180000000000000000000000000000009500160000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r4}, 0x10) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r5}, 0x8) close(r6) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r7, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000005a000d0300000000000000000400008008"], 0x1c}], 0x1}, 0x0) 341.243768ms ago: executing program 0 (id=1367): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xe, 0x0, &(0x7f0000000000)="259a53f271a76d2688a24c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xa}, 0x50) 290.97765ms ago: executing program 3 (id=1368): r0 = socket(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000000800000000000000000700850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='neigh_update\x00', r2, 0x0, 0x3}, 0x51) r4 = socket$nl_generic(0x10, 0x3, 0x10) readv(r4, &(0x7f0000000100), 0xa) sendto$inet6(r3, &(0x7f0000000180)="900000001d001f4d154a817393278bff0a80a578020000000404840014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000766436c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c02000010df4b0400000000000000007a000000", @ANYRES32=r6, @ANYBLOB="00000000800300001c0012800b00010062726964676500000c0002800800030015000000"], 0x3c}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="19000000040000000800000003"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r10}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) sendmsg$NFC_CMD_GET_TARGET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r11) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="2400002cd001000000", @ANYRES16=r12, @ANYBLOB="01002dbd7000fedbdf251900000008000300", @ANYRES32=r13, @ANYBLOB="0500a30000000000"], 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r8) r14 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r8) sendmsg$NL802154_CMD_GET_WPAN_PHY(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r14, @ANYBLOB="010004007001023aeebaa35195520000000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendto$inet6(r0, &(0x7f00000007c0)="7800000018002507b9199b02ffff48000203be04020406050a02040c5c000900580006020a0200000d0085a168d0bf46d32345653600648d27000b000a00070849935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000407160005000a0000000000e000e218d1dd3b6ed538f6523250", 0x78, 0x0, 0x0, 0xe0ffffff) syz_emit_ethernet(0x5a, &(0x7f0000000400)={@empty, @local, @val={@void, {0x8100, 0x0, 0x0, 0x2}}, {@canfd={0xd, {{0x4}, 0x12, 0x2, 0x0, 0x0, "1803dbd05d7b42b279834982b6b9a499d68c10f1ebb495e3738cdbf8c838ca1fbd9eb3c7e828956f3c68f7eb4c88876dabc49bc659db4968f65e8c8bae03438b"}}}}, 0x0) 222.529806ms ago: executing program 0 (id=1369): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$packet(0x11, 0x3, 0x300) (async) socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000000)={@local, @random="1553ff41cf11", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dda00", 0x20, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@mp_fclose={0x1e, 0xc, 0x7, 0x0, 0x2}]}}}}}}}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x2c, 0x3f, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@typed={0x4}, @nested={0x13, 0x1, 0x0, 0x1, [@generic="ba5dd95e7b2c66887ba84bd601b02f"]}]}, 0x2c}}, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000140)={@initdev, @empty}, &(0x7f00000001c0)=0xc) socket$inet6_udplite(0xa, 0x2, 0x88) (async) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_mreq(r5, 0x29, 0x1, 0x0, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) close(0x3) socket(0x400000000010, 0x3, 0x0) (async) r6 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) syz_emit_ethernet(0xe6, &(0x7f0000000400)={@local, @broadcast, @val={@void, {0x8100, 0x1, 0x1}}, {@ipv6={0x86dd, @udp={0x0, 0x6, "2a1c99", 0xac, 0x3c, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @remote, {[@fragment={0x3a, 0x0, 0xf, 0x1, 0x0, 0x1d, 0x65}, @routing={0x88}], {0x2, 0x1, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "03cc6929a7579ba1254ff781f562d592e636fc885b478a84574de942b7f2729d", "88aabd6e3368cb39e36a0941b49eb3b134d57928522542fdd92afe18a81d9de8dd9705adce36275fb698b3ee0b28ed76", "135c884a72271fbff66385042f79221521d0c255b153f3352e26253d", {"9910349f6b705835c9c710c0e30d9528", "7ea918984ebb7deab59edf5a108f613d"}}}}}}}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x87f}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x40020) (async) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x87f}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x40020) 221.770823ms ago: executing program 4 (id=1370): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @local}, 0x1c) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef", 0x11) r2 = socket$inet(0xa, 0x801, 0x85) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="a80d000000000000f9f77cb01ed4cf1200605f110d10d0031800", @ANYRES32=0x0, @ANYBLOB="0080000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x0) setsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000300), 0x4) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='io.stat\x00', 0x0, 0x0) shutdown(r0, 0x0) epoll_pwait(r6, &(0x7f0000000080)=[{}, {}, {}], 0x3, 0xfffffffd, &(0x7f00000000c0)={[0x5]}, 0x8) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x10) r9 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r9, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r9, 0x10e, 0x4, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0, r9) sendmsg$IPVS_CMD_NEW_DAEMON(r8, 0x0, 0x840) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001540)=ANY=[@ANYBLOB="4400000010003b15000800"/20, @ANYRES32=0x0, @ANYBLOB="0000000000b401001c00128009000100626f6e64000000000c000280050001000600000008000a00", @ANYRES32=r10], 0x44}}, 0x0) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000640)="002569f309473b8d34d6fa933e23be", 0xf}], 0x1}, 0x20008008) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000001640)={{r0}, "9995122e68ab7e75e7c6fe1c4bcb24ccfbeda2bff52cefe6b4333ec33ccd52e691aa6891d46d17b980d75a4d01b5523f22a7d712bdd6ae5da4290f3520c0796991d7261f3c75cd6e88a32a3bb48a37dfcb98a59881882d0235f129b8fe87fc2f3958b6ef67329e7bb07de0d82344e574add5c624c745cbaef6b40f7709c410c1320718aa4fa19b4946719ab5b8c19127ed54b0a0a8ac2efa08a436dbf45a3c6125fc27db1151a735c6d8dd5bf713d5fa7cee60ba354755499d2317ad7fc05ffc189c05a4b95ae26a73bd4a915747ca0afc5e47f151d0ba9a0c7b92b42284f4028df72bcc36ec5aa21d805bf16e290586ba1367ae460db4a8876594c6069ff5f27bdda9066772ac19d59ea78170680b2c86b960c33d5999d7b6e64058dce9687ebdd1b2e0c2a144edd853a51695c40606dd528ac14bb272a66ac3a029c5b9c2ff4b7bb31b1395a64e4b903f2750b0031abf4708705d697bf46728c1100b381b4a4ac8a19c67ca13a45a66ac3de96fa7a923f2bd6736e753755cc3d88a2ba9a8d9db02b07aab0bd643a256bc78f79a449b98957010d5ef1059a6e07210c632e3226e86bd0b82d5cffecac08b6830cc823074e87cd307b41c61362dd5f1ba227daa69498f629e26afd3878e711246c8669a0e5f33d06a226f3c89ac9022de97a50db2a496f5aec6421a5fea606fc45cf52f24d464697bfb00220489d104135c7baa61d4ce6def13e02e2df9fb3c7c877ba78edf709057ff7b8e9bb49115f37569f221055066056a373354c7a0fab6ebe0b362ae03ea4c549896e17f84d47bc929226428db200d6a65b48c163ac1b880aa34e8425a3a92ff0eb901e557d44b37cf9cb0d275701bdcdf62ba66440ddc2f051737ec8797c957b1c8d89829e80b3b5638548c8392d44ea1d44cb710da407ee9cb80b2156d505a687b6db28bdd397104d673bfb4ad85a35e99fdd01b279afd11aeba131e3e93afd704eff3788aef2dfbbb882bd7e405a630ccde1606f936a0972a7f2f6d56a86ad5a68796057bd7578a99a226098272066bb6ad236248e36fbe936263443fa2ddc04bbf96c554c901bd1a2c4caf76ba2331c7fbe1e5c818e956f898c18f04b4445c7d5245a77bfddb83944493842aeb3969ef4be545e95dbd80665169f7a136bf0443afe67bc37eabee6dab8e7b39d6a7f7b5163c70f2fd814fe435ccd7212dc113ec1920dd4061ae7326129248c1ad3e19e457a866c73c566356561096b3cab4b39548fbbe20f744aec3e8eacd4a380d44891b7daebfad1141348bde4dcf4447f40b97ece0d693037d344633cd2803f7a8b30caddadc8e3c8bc41d7b2f12160198c5c1bfe12660b6475b775bb08609a754316b9b3161fa97d71fae46930ecc581b8c8fb7a131a2de79722d2fa919627ead77fc440ffd151cf2222e1237df72836011961f34287ac7912c1a1f6ec71471db8a0b4afef6214b313203a91fb72ad68467f5d0d3a0eb9593c04128242d2a6417e40bc457ee44637692f37764ee4c5a75f29bdb07248003cb320ae85ea66779da642e0f563f2074db124110f7f634d7c9fb3ee841834f792bb0b80439c6340df041e6155d59c7dc5602058323a0c029ccb498e9be593ca548855ba6769b1d01e7075de9f5750cd7f81072ecd4199ed0a326089f522a88d633a65c66fe5a3aaafb8022d2ad99573e376577a06e5f2812b0a998638125135ed93b9693ec4aeef663532c05cdbd5665ce7f48fff279ddba702cc995843c9d50d02bab32d9675c6d2c68439f91e1b08ba9f925429dfa74cafa1a2a8822496e1af265e1e3bfbd83d01c5ee2b147cf268b764c40385d0276eb76cb7e83d5ed241c07b95ddb8d245d5ba2637dfbca0a4082c013efaf7fcc97000a9e7b113f2f45cefd19b9fdf9d7f5b8102316fd24eb943f962d964f27008328c499faf4641f41dd8e075ff187b11a659fc5dd24b0596ca671c4724708ee0b908b42868d905a354b719a9589ad0eda2a181899ded21c17bd0c9aee5348ad5b224596eed8ad7421fa45a49fed25aac09585ba6279924fabd7ba697334872c1c4d9715a1ff120e47ca644af8c0621b9e41f60852ff2abd7b77b42f4c2d46b6ffa28bac4eeb26c4020428b769154a2b8722448baa7855314ddf855b0af9021eaf5079c454247625e42dc0ef2cf26ba0f21d7e06c80464b085fade10e111f5d6be1b96de1dc3d8a7856ee7eea7f1be67aacb1de267afe5cf85fc3cb600f0e9597d79e8321b1e2d6de8baf5ed4399c9e14b457806e38b0f554b38f12b2bf0dc6b5a55caa7434a269eb3266cb04c04163b725fb2cfe4f8eb856b721092b07ea9b2889fcc9495b1c49cef0066b3ec9675335222759706de7cd5beacdd6511fa78fa69501cb4f4a103531fe3ef16824cf9af26358774a64418cde8fc0d86b496e45a828a91c4a2a3fde2c9d788736dacfbbc3a0d8f7d2afe59daeb9ecc69cd1b6022446bf58ff111596763c4fc10d6c2c864b8e7aae8954361339cfa159ba33e2fe8fb2b484d2bfca3dd088185e2c208543cc8aad19b9602bdcd631c9337909b5293b2a2c717694929780e5f3574a3cd5be4cc226ec2e4ea812e0c53ed30ee9a6b9c211af7e777eceb82205527e8e8d95845c7aae12cd1acffddf891b31a30e0933dab4560a28f05d47d6f3e9ed30eebae603c76b3ad588a1a4c2a2972ace9aa078d27e92b3153b9e60fa2722c6e6d3ea2070d2a034a8f60bb051faf1356626b630d335cc1f0a8460dc1a3bbc597620bd16db3797433b2188d9792b6118566a94d7dd8ebcf81680a6459ab77046c783c48fec0214f6fe853fc69883a9bfabb759b064dc550150bbb598f265d3862f37b293b4c5d838f6dc42d7024705eeb631e702386fe7d98c142b8822de19eb488c8e9f07e81e5abc6bd4c4eb5c3eaf8164935718a5fc0739aa9110498c7678bf7f2b6f0d4a9ab1a169407a4efc38f82a1ea835a8758cebdad0baf8333350a574538c5f2bf66a5a260cc1d3961a5b032e1eaf70796406e365048d2e40ab981e00d9b81855b2a4c28a6f3b55a774d4e7fe404c26c7bd254d1703131a0ba12181a9ea811b15845cb93e039896b0bde282c5f57981f80f55d1e68bccda4bf149d56ef2c4caf53ab63a47bb89b59f995e6f1883f772bc37d20b77ed8b740beff675e8a7de5bfdd8abbb37a538fd0ccbb09b5ea21eed09d8cb5e521adefeb69eeed889130a8ed28c25c57f38791173b04c24a5d6b76928b6911773070174d541487e0385dce97590e7224ddd910a07f3a68534b6d226b7a1045874ec39f15263e3657a511066f7e19dceb72f483fda3653035a75815fb5cca389d2b6ffc6b69ecd365456a4e3c41314163000e3e4b7e49d0ae967421c11d08b3d19e03aa25bae788723b3527bfb268dc05390d1535019df0127b602f34282241b672d06bc4b9adc2f14c40e98e8eea9539bcf2603ef4a84206b5094533cc502c437fccbba9c133c71105b79c5fc962212fcb6899c636732fcd36836af8f5b34df2a950350b979768f5dc369fb3a2772a79429825e16a31ab5008920a0da908bc0f6c61633242f82a77f38d28fbfba0d74445dcb30e9b7d4550f3f53edc4aeab3059d014935d2019b24552ed9290cff9dc48fbe08aa03659aed8a85daa682288fda2f4233bb1784a7e08f936be38cca7f2eda4b2d2850c139f1cd41185334ce2ee8a7cb83aa5adbc723b0d0946258df59a56259e020dbc7d73784b58ed53abfc902a6b8916b2c1cfe59767f659f4202b37a8feb5260e9a4e09ebc70a6b11e72db77ae4a12adfc6829e805325103ddd43c584b79755b87482f64dcd09a70e75da743446b769474ff00883f7afb049971f28d109c051d4f7165a8fbfdbf33a0389972779d4da47fb7543d69b809c52241dcf4e65faaad59e6174cfa9ea31b86f7499bab7338e0f4824b4af81a446352749c9d48f6cd6f116b2589ce8cada9f158be40001381722338d3347d40a49187ae8e2fbd395a42cab9f22363cc5a9ca62db71b9c47fec7a96ac3256a7045b8313edb0a2ebf12ff77213991027e64096f41b0a0dcca3697173e49ca22762f40159125227038e2beae1c25248f266320cc6a57891679a6343562a80f95524ce7e3ace4a7dcb75911a6947049c699eadfb0878a013e2f01789f1ffc85b0c2df25cbfb5e4e6b3248b5122d9dd0411b2eadcd157168c747e4de485bae74cf2a0ddca128c1a85182b6f4dd45ad96fd603c190c4d439190bbc2c004d7e4a0de23bc729c7c3dd2808cd24e426fcad09d98ec32e764f84ec55224635a1bd8648ce32d32051b30058e0bb22c88368901533d4d10b37fb71b6904a08ea2d87d2b416bec770c13878aa89ad9b7e6530609b8e7399944d5a0387ff344f2da32afcf5a0380fc14d1a7f9b4c22869f855bbccb7757deec1ed4d486b91f155f8a1982d1f2a7a5fa94785f67d8fd8d2145c8f3dbf6052792bc996c323b96db5bf49417b536850701f692fe7481f24aa9acf5033956ff8cf10738713e9107271954d7400dd327c77aa2fb6654c6b575139d810c9c6c91614f3fae40519eedca291da514ea1d57d878d27bbd3c1a867c0a61f93322a5e00479c6b2b6861e3eee210db9e241662007e1cbfc8d27ce21bab65e476a11185d5dbe577f3ec1d923acfb66b58cf03ee9cca0624bc43c73aadacac8a80b4352754158fac5e747004a0262b89bfc87c4f42e782a60cc8b86f22ef0008817928009f8cafa585fe27f63e586f3a916fc2c2ac5cda20ca869829a09dd8f17ea96dfd1e06f45d6c536deca21dec449fb4e6fcd8d0635d8b963f390002c11d2a67b9ccd46bb868878609fe02fc0ae7900c7e64f1da27b9f854fc7efc376eb26da548ae05f79ed785cb2e46e6ce145df5baa3db282a0dec7db5d2fc10ea92cedf767e413becb85bd0922f83036e9083a3333ff50a2ba5191d543dfcad8abfb7ffe07505f54af1e4b1d24d68dd9d224f2f28847645e3f48012081fbaf49476812465bd0142b006a6c106017d5abacb616a2764f0aaa0d743c65e1e65484cfd543c99ea319c6adf788c848aac19f5085aff50de4204f53d5055b0f726f87d6bd81fbc29b8684e35c5379d837a3026c7e5a95f9ce5733b08ed77058bf94480c7390b2e08aef494c0d36f8fd8bc8dfbb9b0550b8d9b2f23212462fb5f1f192a537645f3f2340c8c501b78f49adfc7a3da3e486bd3a544e07e3ff33020e2b6e84f10f149f3b7fd36afc8f277474170d6691e81c7a8c8ab19c845d0398e57b0df23cf29ad3021cae9185b35e946c351088b2bfcfea1f8a1e5343e514e21075618ca1fc16293926f35f43cdd400eaab16dd400335349c57615b320ccf9f27212776d7283c5987d4656567b93fc18922b89e2eb8101983a78eddfbc0b0d7258cf9492dc2b31f07a059d9bbb48df4dfa08da274ea2dd6f68b829919b4c4e2df26dbf159c8d29aede89a06069b8b693e509095909fd361e2936850efd97b47f9e26950b3e87bae471c058b3fcd99598c5c9fbec20090e1da579fbb97d1636ca866839853a648a32e1b0bfd08099d3ffff4545b4123ec142341c8e325de33064bccec8ab5bb7716c7232f385043e1a265f3b2523e080b40ba013d8567a4e8aa1e8df48c7e8c8efc4c6cf9f7635983e2630749c23c38310a909f12d46a3f1742247c51226b592b5cb7564594ebbc55b4d240460005b2c3fc6846c97eeed90d9be0ae2202041a67b014ebc14ed38ecfa40d84026d5622d26a0c1a75442d43065f8287cbe58c162ff43d4273148b04e3b"}) 147.653737ms ago: executing program 2 (id=1371): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00T\x00=\t\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00', @ANYRES32=r2, @ANYBLOB, @ANYRES32=r2, @ANYBLOB="00030000ff02000000000000fc0000"], 0x38}}, 0x0) 0s ago: executing program 3 (id=1372): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001d80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) kernel console output (not intermixed with test programs): 8 [ 69.733020][ T6133] RAX: ffffffffffffffda RBX: 00007f0114fa5fa0 RCX: 00007f0114d8d169 [ 69.733030][ T6133] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 69.733039][ T6133] RBP: 00007f0115c58090 R08: 0000000000000000 R09: 0000000000000000 [ 69.733048][ T6133] R10: 0040000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 69.733057][ T6133] R13: 0000000000000000 R14: 00007f0114fa5fa0 R15: 00007ffe05b99388 [ 69.733084][ T6133] [ 70.061284][ T6144] syz.3.62 uses obsolete (PF_INET,SOCK_PACKET) [ 70.199459][ T6139] netlink: 'syz.1.63': attribute type 10 has an invalid length. [ 70.222028][ T6139] syz1: rxe_newlink: already configured on team_slave_0 [ 70.246652][ T6157] netlink: 8 bytes leftover after parsing attributes in process `syz.2.66'. [ 70.267916][ T6157] netlink: 44 bytes leftover after parsing attributes in process `syz.2.66'. [ 70.319801][ T6160] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 70.446188][ T6165] netlink: 4 bytes leftover after parsing attributes in process `syz.2.70'. [ 70.586172][ T6172] x_tables: duplicate underflow at hook 2 [ 71.058184][ T6187] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 71.088331][ T6189] FAULT_INJECTION: forcing a failure. [ 71.088331][ T6189] name failslab, interval 1, probability 0, space 0, times 0 [ 71.142655][ T6189] CPU: 1 UID: 0 PID: 6189 Comm: syz.2.81 Not tainted 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0 [ 71.142680][ T6189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 71.142694][ T6189] Call Trace: [ 71.142700][ T6189] [ 71.142707][ T6189] dump_stack_lvl+0x241/0x360 [ 71.142734][ T6189] ? __pfx_dump_stack_lvl+0x10/0x10 [ 71.142751][ T6189] ? __pfx__printk+0x10/0x10 [ 71.142770][ T6189] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 71.142796][ T6189] ? __pfx___might_resched+0x10/0x10 [ 71.142822][ T6189] should_fail_ex+0x40a/0x550 [ 71.142849][ T6189] should_failslab+0xac/0x100 [ 71.142871][ T6189] kmem_cache_alloc_node_noprof+0x77/0x380 [ 71.142891][ T6189] ? __alloc_skb+0x1c3/0x440 [ 71.142915][ T6189] __alloc_skb+0x1c3/0x440 [ 71.142936][ T6189] ? __pfx___alloc_skb+0x10/0x10 [ 71.142951][ T6189] ? __lock_acquire+0x1397/0x2100 [ 71.142981][ T6189] __ip_append_data+0x30dd/0x46b0 [ 71.143019][ T6189] ? __pfx_raw_getfrag+0x10/0x10 [ 71.143040][ T6189] ? ipv4_mtu+0x23/0x5b0 [ 71.143077][ T6189] ? ipv4_mtu+0x23/0x5b0 [ 71.143098][ T6189] ? __pfx___ip_append_data+0x10/0x10 [ 71.143113][ T6189] ? ipv4_mtu+0x23/0x5b0 [ 71.143137][ T6189] ? ip_setup_cork+0x580/0x9a0 [ 71.143158][ T6189] ip_append_data+0x14c/0x190 [ 71.143176][ T6189] ? __pfx_raw_getfrag+0x10/0x10 [ 71.143203][ T6189] raw_sendmsg+0x1a33/0x2500 [ 71.143251][ T6189] ? __pfx_raw_sendmsg+0x10/0x10 [ 71.143289][ T6189] ? aa_sk_perm+0x96d/0xab0 [ 71.143318][ T6189] ? __pfx_aa_sk_perm+0x10/0x10 [ 71.143343][ T6189] ? inet_sendmsg+0x330/0x390 [ 71.143365][ T6189] __sock_sendmsg+0x1a6/0x270 [ 71.143389][ T6189] ____sys_sendmsg+0x53a/0x860 [ 71.143414][ T6189] ? __pfx_____sys_sendmsg+0x10/0x10 [ 71.143429][ T6189] ? __fget_files+0x2a/0x410 [ 71.143453][ T6189] ? __fget_files+0x2a/0x410 [ 71.143481][ T6189] __sys_sendmmsg+0x36a/0x720 [ 71.143510][ T6189] ? __pfx___sys_sendmmsg+0x10/0x10 [ 71.143539][ T6189] ? __pfx_lock_release+0x10/0x10 [ 71.143565][ T6189] ? kstrtouint_from_user+0x128/0x190 [ 71.143606][ T6189] ? ksys_write+0x22a/0x2b0 [ 71.143623][ T6189] ? __pfx_lock_release+0x10/0x10 [ 71.143651][ T6189] ? sb_end_write+0xe9/0x1c0 [ 71.143672][ T6189] ? vfs_write+0x7fa/0xd10 [ 71.143695][ T6189] ? __mutex_unlock_slowpath+0x227/0x800 [ 71.143743][ T6189] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 71.143768][ T6189] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 71.143791][ T6189] ? do_syscall_64+0x100/0x230 [ 71.143813][ T6189] __x64_sys_sendmmsg+0xa0/0xb0 [ 71.143832][ T6189] do_syscall_64+0xf3/0x230 [ 71.143850][ T6189] ? clear_bhb_loop+0x35/0x90 [ 71.143873][ T6189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.143892][ T6189] RIP: 0033:0x7fcda798d169 [ 71.143907][ T6189] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.143919][ T6189] RSP: 002b:00007fcda87c4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 71.143937][ T6189] RAX: ffffffffffffffda RBX: 00007fcda7ba5fa0 RCX: 00007fcda798d169 [ 71.143948][ T6189] RDX: 0000000000000002 RSI: 0000400000004c80 RDI: 0000000000000003 [ 71.143958][ T6189] RBP: 00007fcda87c4090 R08: 0000000000000000 R09: 0000000000000000 [ 71.143968][ T6189] R10: 0000000000001000 R11: 0000000000000246 R12: 0000000000000001 [ 71.143978][ T6189] R13: 0000000000000000 R14: 00007fcda7ba5fa0 R15: 00007ffcbabfef08 [ 71.144005][ T6189] [ 71.533781][ T6194] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.542755][ T6194] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.551466][ T6194] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.560240][ T6194] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.588008][ T6194] Zero length message leads to an empty skb [ 71.624057][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.631940][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.660158][ T6194] syz.3.82 (6194) used greatest stack depth: 17872 bytes left [ 72.197927][ T6217] netlink: 'syz.2.86': attribute type 3 has an invalid length. [ 72.221570][ T6217] netlink: 'syz.2.86': attribute type 1 has an invalid length. [ 72.393826][ T6219] 8021q: adding VLAN 0 to HW filter on device bond2 [ 72.402280][ T6219] bond1: (slave bond2): making interface the new active one [ 72.410292][ T6219] bond1: (slave bond2): Enslaving as an active interface with an up link [ 72.530841][ T6227] batadv1: entered allmulticast mode [ 73.399800][ T6242] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 73.418180][ T6244] netlink: 28 bytes leftover after parsing attributes in process `syz.0.97'. [ 73.460419][ T6247] netlink: 'syz.3.98': attribute type 6 has an invalid length. [ 73.541376][ T6252] netlink: 20 bytes leftover after parsing attributes in process `syz.3.99'. [ 74.077369][ T6266] batadv1: entered allmulticast mode [ 74.316766][ T6268] FAULT_INJECTION: forcing a failure. [ 74.316766][ T6268] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 74.371664][ T6268] CPU: 0 UID: 0 PID: 6268 Comm: syz.3.104 Not tainted 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0 [ 74.371687][ T6268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 74.371697][ T6268] Call Trace: [ 74.371703][ T6268] [ 74.371710][ T6268] dump_stack_lvl+0x241/0x360 [ 74.371736][ T6268] ? __pfx_dump_stack_lvl+0x10/0x10 [ 74.371757][ T6268] ? __pfx__printk+0x10/0x10 [ 74.371777][ T6268] ? stack_trace_save+0x118/0x1d0 [ 74.371798][ T6268] should_fail_ex+0x40a/0x550 [ 74.371823][ T6268] prepare_alloc_pages+0x1da/0x5b0 [ 74.371848][ T6268] __alloc_frozen_pages_noprof+0x16f/0x710 [ 74.371864][ T6268] ? splice_direct_to_actor+0x4af/0xc80 [ 74.371886][ T6268] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 74.371918][ T6268] alloc_pages_bulk_noprof+0x847/0xae0 [ 74.371946][ T6268] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 74.371969][ T6268] ? rcu_is_watching+0x15/0xb0 [ 74.371986][ T6268] ? trace_kmalloc+0x1f/0xd0 [ 74.372005][ T6268] ? copy_splice_read+0x17f/0xb40 [ 74.372027][ T6268] copy_splice_read+0x1b0/0xb40 [ 74.372052][ T6268] ? __pfx_copy_splice_read+0x10/0x10 [ 74.372068][ T6268] ? rcu_read_lock_any_held+0xb7/0x160 [ 74.372096][ T6268] ? file_end_write+0x15b/0x250 [ 74.372115][ T6268] ? direct_splice_actor+0x128/0x220 [ 74.372134][ T6268] ? __pfx_copy_splice_read+0x10/0x10 [ 74.372154][ T6268] splice_direct_to_actor+0x4af/0xc80 [ 74.372187][ T6268] ? __pfx_direct_splice_actor+0x10/0x10 [ 74.372207][ T6268] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 74.372227][ T6268] ? __fget_files+0x2a/0x410 [ 74.372249][ T6268] ? __pfx_lock_release+0x10/0x10 [ 74.372273][ T6268] do_splice_direct+0x289/0x3e0 [ 74.372297][ T6268] ? __pfx_do_splice_direct+0x10/0x10 [ 74.372316][ T6268] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 74.372341][ T6268] ? rw_verify_area+0x243/0x630 [ 74.372360][ T6268] do_sendfile+0x564/0x8a0 [ 74.372392][ T6268] ? __pfx_do_sendfile+0x10/0x10 [ 74.372414][ T6268] ? __fget_files+0x2a/0x410 [ 74.372448][ T6268] __se_sys_sendfile64+0x17c/0x1e0 [ 74.372470][ T6268] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 74.372492][ T6268] ? do_syscall_64+0x100/0x230 [ 74.372514][ T6268] ? do_syscall_64+0xb6/0x230 [ 74.372535][ T6268] do_syscall_64+0xf3/0x230 [ 74.372553][ T6268] ? clear_bhb_loop+0x35/0x90 [ 74.372575][ T6268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.372595][ T6268] RIP: 0033:0x7f2ce8f8d169 [ 74.372608][ T6268] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.372621][ T6268] RSP: 002b:00007f2ce9e0b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 74.372638][ T6268] RAX: ffffffffffffffda RBX: 00007f2ce91a5fa0 RCX: 00007f2ce8f8d169 [ 74.372650][ T6268] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 74.372660][ T6268] RBP: 00007f2ce9e0b090 R08: 0000000000000000 R09: 0000000000000000 [ 74.372670][ T6268] R10: 0040000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 74.372680][ T6268] R13: 0000000000000000 R14: 00007f2ce91a5fa0 R15: 00007ffcbe158948 [ 74.372704][ T6268] [ 74.885735][ T6272] ip6gretap1: entered allmulticast mode [ 75.195536][ T6282] netlink: 20 bytes leftover after parsing attributes in process `syz.0.111'. [ 75.210936][ T6281] netlink: 8 bytes leftover after parsing attributes in process `syz.1.109'. [ 75.378335][ T6292] netlink: 'syz.1.112': attribute type 3 has an invalid length. [ 75.397059][ T6292] netlink: 'syz.1.112': attribute type 1 has an invalid length. [ 75.468134][ T6292] bond1 (unregistering): Released all slaves [ 75.949372][ T6310] netlink: 68 bytes leftover after parsing attributes in process `syz.0.116'. [ 76.262232][ T6328] netlink: 8 bytes leftover after parsing attributes in process `syz.4.124'. [ 76.349896][ T6339] bridge_slave_0: left allmulticast mode [ 76.405202][ T6339] bridge_slave_0: left promiscuous mode [ 76.410960][ T6339] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.483432][ T6339] bridge_slave_1: left allmulticast mode [ 76.502722][ T6342] netlink: 8 bytes leftover after parsing attributes in process `syz.4.126'. [ 76.532507][ T6339] bridge_slave_1: left promiscuous mode [ 76.558593][ T6339] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.597224][ T6339] bond0: (slave bond_slave_0): Releasing backup interface [ 76.615525][ T6339] bond0: (slave bond_slave_1): Releasing backup interface [ 76.621156][ T6351] netlink: 'syz.1.127': attribute type 1 has an invalid length. [ 76.649786][ T6339] team0: Failed to send options change via netlink (err -105) [ 76.658189][ T6339] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 76.669770][ T6339] team0: Port device team_slave_0 removed [ 76.681159][ T6339] team0: Failed to send options change via netlink (err -105) [ 76.693982][ T8] cfg80211: failed to load regulatory.db [ 76.701599][ T6339] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 76.711614][ T6339] team0: Port device team_slave_1 removed [ 76.761472][ T6324] team0: Failed to send options change via netlink (err -105) [ 76.785099][ T6324] team0: Mode changed to "loadbalance" [ 76.854851][ T6354] bond1 (unregistering): Released all slaves [ 77.132913][ T6369] netlink: 8 bytes leftover after parsing attributes in process `syz.0.132'. [ 77.414234][ T6375] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.551073][ T6375] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.649293][ T6375] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.826666][ T6375] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.230984][ T6394] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 78.254489][ T6375] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.327825][ T6375] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.379921][ T6375] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.414221][ T6375] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.558321][ T6403] netlink: 'syz.1.145': attribute type 3 has an invalid length. [ 78.567062][ T6403] netlink: 'syz.1.145': attribute type 1 has an invalid length. [ 78.639508][ T6403] bond1 (unregistering): Released all slaves [ 79.232295][ T6425] netlink: 'syz.3.153': attribute type 10 has an invalid length. [ 79.266288][ T6425] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.285086][ T6425] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 79.541385][ T6435] netlink: 12 bytes leftover after parsing attributes in process `syz.0.156'. [ 79.714714][ T6440] batadv1: entered allmulticast mode [ 80.324386][ T6447] netlink: 'syz.3.160': attribute type 3 has an invalid length. [ 80.344218][ T6447] netlink: 'syz.3.160': attribute type 1 has an invalid length. [ 80.491068][ T6447] 8021q: adding VLAN 0 to HW filter on device bond2 [ 80.499304][ T6447] bond1: (slave bond2): making interface the new active one [ 80.507009][ T6447] bond1: (slave bond2): Enslaving as an active interface with an up link [ 81.741861][ T6488] netlink: 16 bytes leftover after parsing attributes in process `syz.0.170'. [ 81.752047][ T6488] netlink: 4 bytes leftover after parsing attributes in process `syz.0.170'. [ 81.760877][ T6488] netlink: 4 bytes leftover after parsing attributes in process `syz.0.170'. [ 81.923755][ T6493] netlink: 'syz.3.172': attribute type 1 has an invalid length. [ 81.931920][ T6488] netlink: 4 bytes leftover after parsing attributes in process `syz.0.170'. [ 81.940740][ T6488] netlink: 4 bytes leftover after parsing attributes in process `syz.0.170'. [ 82.026976][ T6498] netlink: 124 bytes leftover after parsing attributes in process `syz.3.172'. [ 82.301598][ T6508] netlink: 4 bytes leftover after parsing attributes in process `syz.2.176'. [ 82.306519][ T6488] netlink: 4 bytes leftover after parsing attributes in process `syz.0.170'. [ 82.321952][ T6508] netlink: 8 bytes leftover after parsing attributes in process `syz.2.176'. [ 82.636493][ T6521] vlan2: entered allmulticast mode [ 82.641656][ T6521] bond0: entered allmulticast mode [ 82.713965][ T6521] bond_slave_0: entered allmulticast mode [ 82.720316][ T6521] bond_slave_1: entered allmulticast mode [ 82.778436][ T6521] bridge0: port 3(vlan2) entered blocking state [ 82.831603][ T6521] bridge0: port 3(vlan2) entered disabled state [ 82.865919][ T6521] vlan2: entered promiscuous mode [ 82.880202][ T6521] bridge0: port 3(vlan2) entered blocking state [ 82.886825][ T6521] bridge0: port 3(vlan2) entered forwarding state [ 82.909283][ T6538] IPVS: ip_vs_add_dest(): server weight less than zero [ 82.916904][ T25] IPVS: starting estimator thread 0... [ 83.032063][ T6540] IPVS: using max 22 ests per chain, 52800 per kthread [ 83.569176][ T6564] batadv1: entered allmulticast mode [ 83.963091][ T6577] vlan2: entered allmulticast mode [ 83.984080][ T6577] bond0: entered allmulticast mode [ 83.992212][ T6577] bond_slave_0: entered allmulticast mode [ 83.997964][ T6577] bond_slave_1: entered allmulticast mode [ 84.004121][ T6577] batadv0: entered allmulticast mode [ 84.011263][ T6577] bridge0: port 3(vlan2) entered blocking state [ 84.018365][ T6577] bridge0: port 3(vlan2) entered disabled state [ 84.027545][ T6577] vlan2: entered promiscuous mode [ 84.033063][ T6577] bond0: entered promiscuous mode [ 84.038102][ T6577] bond_slave_0: entered promiscuous mode [ 84.044487][ T6577] bond_slave_1: entered promiscuous mode [ 84.050294][ T6577] batadv0: entered promiscuous mode [ 84.056566][ T6577] bridge0: port 3(vlan2) entered blocking state [ 84.063611][ T6577] bridge0: port 3(vlan2) entered forwarding state [ 84.669313][ T6594] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.741610][ T6595] __nla_validate_parse: 7 callbacks suppressed [ 84.741628][ T6595] netlink: 12 bytes leftover after parsing attributes in process `syz.3.202'. [ 84.784177][ T6595] tipc: Enabling of bearer rejected, media not registered [ 84.973731][ T6594] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.054508][ T6616] netlink: 24 bytes leftover after parsing attributes in process `syz.3.208'. [ 85.150653][ T6594] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.176910][ T6619] team0: entered allmulticast mode [ 85.266369][ T6594] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.521450][ T6594] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.559189][ T6594] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.588805][ T6594] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.629643][ T6594] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.961074][ T6636] pim6reg: entered allmulticast mode [ 86.122110][ T6641] netlink: 28 bytes leftover after parsing attributes in process `syz.0.215'. [ 86.201261][ T6646] netlink: 36 bytes leftover after parsing attributes in process `syz.3.217'. [ 86.267005][ T6649] netlink: 12 bytes leftover after parsing attributes in process `syz.1.218'. [ 86.401691][ T6652] netlink: 40 bytes leftover after parsing attributes in process `syz.3.219'. [ 86.477694][ T6656] netlink: 8 bytes leftover after parsing attributes in process `syz.4.221'. [ 86.497195][ T6658] netlink: 16 bytes leftover after parsing attributes in process `syz.0.222'. [ 86.702155][ T6664] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 86.719942][ T6669] netlink: 'syz.4.227': attribute type 7 has an invalid length. [ 86.957335][ T6687] netlink: 28 bytes leftover after parsing attributes in process `syz.1.233'. [ 86.979879][ T6690] netlink: 40 bytes leftover after parsing attributes in process `syz.4.234'. [ 86.997854][ T6688] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 87.418660][ T6710] netlink: 'syz.4.240': attribute type 93 has an invalid length. [ 87.505483][ T6712] netlink: 'syz.4.241': attribute type 3 has an invalid length. [ 87.514132][ T6712] netlink: 'syz.4.241': attribute type 1 has an invalid length. [ 87.545451][ T6712] 8021q: adding VLAN 0 to HW filter on device bond2 [ 87.553528][ T6712] bond1: (slave bond2): making interface the new active one [ 87.561118][ T6712] bond1: (slave bond2): Enslaving as an active interface with an up link [ 88.006989][ T6733] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 88.792198][ T6763] netlink: 'syz.1.257': attribute type 10 has an invalid length. [ 88.812145][ T6763] syz1: rxe_newlink: already configured on team_slave_0 [ 89.590215][ T6792] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 89.610675][ T6791] syzkaller0: tun_chr_ioctl cmd 2147767507 [ 89.640805][ T6794] netlink: 'syz.4.267': attribute type 3 has an invalid length. [ 89.656790][ T6794] netlink: 'syz.4.267': attribute type 1 has an invalid length. [ 89.766073][ T6794] 8021q: adding VLAN 0 to HW filter on device bond4 [ 89.775070][ T6794] bond3: (slave bond4): making interface the new active one [ 89.793353][ T6794] bond3: (slave bond4): Enslaving as an active interface with an up link [ 89.871047][ T6802] batadv_slave_1: entered promiscuous mode [ 89.880006][ T6804] __nla_validate_parse: 7 callbacks suppressed [ 89.880019][ T6804] netlink: 596 bytes leftover after parsing attributes in process `syz.2.270'. [ 89.889410][ T6803] netlink: 12 bytes leftover after parsing attributes in process `syz.3.269'. [ 89.895912][ T6801] batadv_slave_1: left promiscuous mode [ 90.144423][ T6819] netlink: 'syz.3.273': attribute type 10 has an invalid length. [ 90.176122][ T6819] netlink: 'syz.3.273': attribute type 29 has an invalid length. [ 90.225213][ T6821] netlink: 'syz.4.274': attribute type 10 has an invalid length. [ 90.242710][ T6821] netlink: 24 bytes leftover after parsing attributes in process `syz.4.274'. [ 90.315377][ T6830] netlink: 'syz.3.273': attribute type 29 has an invalid length. [ 90.847151][ T6843] netlink: 4 bytes leftover after parsing attributes in process `syz.2.280'. [ 90.877485][ T6848] vlan2: entered allmulticast mode [ 90.892997][ T6848] bond0: entered allmulticast mode [ 90.905907][ T6848] bridge0: port 1(vlan2) entered blocking state [ 90.918898][ T6848] bridge0: port 1(vlan2) entered disabled state [ 90.936958][ T6848] vlan2: entered promiscuous mode [ 90.953146][ T6848] bond0: entered promiscuous mode [ 91.018605][ T6851] netlink: 44 bytes leftover after parsing attributes in process `syz.2.282'. [ 91.112631][ T6853] netlink: 12 bytes leftover after parsing attributes in process `syz.4.283'. [ 91.226230][ T6862] GUP no longer grows the stack in syz.2.286 (6862): 400000006000-40000000a000 (400000005000) [ 91.245736][ T6862] CPU: 1 UID: 0 PID: 6862 Comm: syz.2.286 Not tainted 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0 [ 91.245760][ T6862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 91.245770][ T6862] Call Trace: [ 91.245776][ T6862] [ 91.245784][ T6862] dump_stack_lvl+0x241/0x360 [ 91.245813][ T6862] ? __pfx_dump_stack_lvl+0x10/0x10 [ 91.245832][ T6862] ? __pfx__printk+0x10/0x10 [ 91.245847][ T6862] ? find_vma+0xf9/0x170 [ 91.245874][ T6862] __get_user_pages+0x3b07/0x4140 [ 91.245907][ T6862] ? mark_lock+0x9a/0x360 [ 91.245949][ T6862] ? __pfx___get_user_pages+0x10/0x10 [ 91.245972][ T6862] ? __gup_longterm_locked+0xd2f/0x17f0 [ 91.245992][ T6862] ? __pfx_down_read_killable+0x10/0x10 [ 91.246020][ T6862] ? __pfx_lock_acquire+0x10/0x10 [ 91.246042][ T6862] ? try_get_folio+0xf1/0x6f0 [ 91.246060][ T6862] ? __pfx_lock_release+0x10/0x10 [ 91.246088][ T6862] __gup_longterm_locked+0xe64/0x17f0 [ 91.246117][ T6862] ? mark_lock+0x9a/0x360 [ 91.246136][ T6862] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 91.246158][ T6862] ? __pfx___gup_longterm_locked+0x10/0x10 [ 91.246176][ T6862] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 91.246204][ T6862] ? gup_fast_fallback+0x207e/0x29c0 [ 91.246224][ T6862] gup_fast_fallback+0x2266/0x29c0 [ 91.246268][ T6862] ? __pfx_gup_fast_fallback+0x10/0x10 [ 91.246316][ T6862] ? __mutex_trylock_common+0x183/0x2e0 [ 91.246336][ T6862] ? __pfx___might_resched+0x10/0x10 [ 91.246355][ T6862] ? is_valid_gup_args+0x124/0x200 [ 91.246374][ T6862] get_user_pages_fast+0xcc/0x160 [ 91.246394][ T6862] ? __pfx_get_user_pages_fast+0x10/0x10 [ 91.246409][ T6862] ? rcu_is_watching+0x15/0xb0 [ 91.246428][ T6862] ? trace_contention_end+0x3c/0x120 [ 91.246447][ T6862] ? __mutex_lock+0x397/0x1010 [ 91.246469][ T6862] __iov_iter_get_pages_alloc+0x3b4/0x8e0 [ 91.246495][ T6862] ? __se_sys_vmsplice+0x4b7/0x14a0 [ 91.246521][ T6862] iov_iter_get_pages2+0xcf/0x130 [ 91.246545][ T6862] ? __pfx_iov_iter_get_pages2+0x10/0x10 [ 91.246576][ T6862] __se_sys_vmsplice+0x739/0x14a0 [ 91.246596][ T6862] ? plist_del+0x3f1/0x410 [ 91.246642][ T6862] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 91.246666][ T6862] ? __pfx_futex_wake+0x10/0x10 [ 91.246741][ T6862] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 91.246773][ T6862] ? do_syscall_64+0x100/0x230 [ 91.246796][ T6862] ? do_syscall_64+0xb6/0x230 [ 91.246819][ T6862] do_syscall_64+0xf3/0x230 [ 91.246838][ T6862] ? clear_bhb_loop+0x35/0x90 [ 91.246863][ T6862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.246884][ T6862] RIP: 0033:0x7fcda798d169 [ 91.246900][ T6862] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.246913][ T6862] RSP: 002b:00007fcda87c4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 91.246931][ T6862] RAX: ffffffffffffffda RBX: 00007fcda7ba5fa0 RCX: 00007fcda798d169 [ 91.246943][ T6862] RDX: 0000000000000001 RSI: 00004000000000c0 RDI: 0000000000000007 [ 91.246954][ T6862] RBP: 00007fcda7a0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 91.246964][ T6862] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 91.246974][ T6862] R13: 0000000000000000 R14: 00007fcda7ba5fa0 R15: 00007ffcbabfef08 [ 91.247002][ T6862] [ 91.604389][ T6863] 8021q: adding VLAN 0 to HW filter on device bond4 [ 91.612442][ T6863] bond3: (slave bond4): making interface the new active one [ 91.620759][ T6863] bond3: (slave bond4): Enslaving as an active interface with an up link [ 92.065841][ T6887] x_tables: arp_tables: .0 target: invalid size 8 (kernel) != (user) 0 [ 92.339070][ T6903] batadv1: entered allmulticast mode [ 92.377040][ T6905] vlan3: entered allmulticast mode [ 92.382633][ T6905] bond0: entered allmulticast mode [ 92.387827][ T6905] team0: entered allmulticast mode [ 92.403565][ T6905] bridge0: port 1(vlan3) entered blocking state [ 92.421928][ T6905] bridge0: port 1(vlan3) entered disabled state [ 92.430461][ T6905] vlan3: entered promiscuous mode [ 92.463032][ T6913] netlink: 12 bytes leftover after parsing attributes in process `syz.2.298'. [ 92.482294][ T6905] bond0: entered promiscuous mode [ 92.493632][ T6905] team0: entered promiscuous mode [ 92.528639][ T6905] bridge0: port 1(vlan3) entered blocking state [ 92.535025][ T6905] bridge0: port 1(vlan3) entered forwarding state [ 92.550466][ T6922] validate_nla: 2 callbacks suppressed [ 92.550480][ T6922] netlink: 'syz.3.301': attribute type 3 has an invalid length. [ 92.579238][ T6922] netlink: 'syz.3.301': attribute type 1 has an invalid length. [ 92.764116][ T6924] 8021q: adding VLAN 0 to HW filter on device bond6 [ 92.787072][ T6924] bond5: (slave bond6): making interface the new active one [ 92.806767][ T6924] bond5: (slave bond6): Enslaving as an active interface with an up link [ 92.828623][ T6932] netlink: 4 bytes leftover after parsing attributes in process `syz.0.295'. [ 92.852104][ T6933] netlink: 'syz.1.302': attribute type 10 has an invalid length. [ 92.875561][ T6933] syz1: rxe_newlink: already configured on team_slave_0 [ 92.995179][ T6934] netlink: 4 bytes leftover after parsing attributes in process `syz.2.303'. [ 93.166484][ T6944] netlink: 12 bytes leftover after parsing attributes in process `syz.2.304'. [ 93.798496][ T6977] 8021q: adding VLAN 0 to HW filter on device bond5 [ 93.850375][ T6986] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 94.082423][ T6981] lo speed is unknown, defaulting to 1000 [ 94.089912][ T6981] lo speed is unknown, defaulting to 1000 [ 94.097592][ T6981] lo speed is unknown, defaulting to 1000 [ 94.483997][ T6981] infiniband syz0: set active [ 94.488872][ T25] lo speed is unknown, defaulting to 1000 [ 94.495451][ T6981] infiniband syz0: added lo [ 94.533570][ T6981] RDS/IB: syz0: added [ 94.537750][ T6981] smc: adding ib device syz0 with port count 1 [ 94.544231][ T6981] smc: ib device syz0 port 1 has pnetid [ 94.572559][ T6981] lo speed is unknown, defaulting to 1000 [ 94.636942][ T25] lo speed is unknown, defaulting to 1000 [ 94.899073][ T6981] lo speed is unknown, defaulting to 1000 [ 94.977673][ T7009] netlink: 24 bytes leftover after parsing attributes in process `syz.2.321'. [ 95.089730][ T6981] lo speed is unknown, defaulting to 1000 [ 95.222218][ T7012] xt_CT: No such helper "syz1" [ 95.285143][ T7020] 8021q: adding VLAN 0 to HW filter on device bond6 [ 95.357732][ T6981] lo speed is unknown, defaulting to 1000 [ 95.411064][ T7026] 8021q: adding VLAN 0 to HW filter on device bond7 [ 95.491623][ T7029] netlink: 28 bytes leftover after parsing attributes in process `syz.2.328'. [ 95.651389][ T6981] lo speed is unknown, defaulting to 1000 [ 95.943860][ T7041] netlink: 28 bytes leftover after parsing attributes in process `syz.3.332'. [ 96.036525][ T7044] netlink: 24 bytes leftover after parsing attributes in process `syz.4.334'. [ 96.084821][ T7047] netlink: 72 bytes leftover after parsing attributes in process `syz.3.336'. [ 96.096963][ T7047] netlink: 12 bytes leftover after parsing attributes in process `syz.3.336'. [ 96.108953][ T7047] netlink: 8 bytes leftover after parsing attributes in process `syz.3.336'. [ 96.129671][ T7048] netlink: 32 bytes leftover after parsing attributes in process `syz.0.335'. [ 96.159259][ T7048] netlink: 12 bytes leftover after parsing attributes in process `syz.0.335'. [ 96.174449][ T7050] netlink: 40 bytes leftover after parsing attributes in process `syz.4.337'. [ 96.247778][ T7051] netlink: 'syz.3.336': attribute type 1 has an invalid length. [ 96.265294][ T7051] netlink: 'syz.3.336': attribute type 2 has an invalid length. [ 96.282156][ T7051] netlink: 'syz.3.336': attribute type 1 has an invalid length. [ 96.295744][ T7047] netlink: 'syz.3.336': attribute type 1 has an invalid length. [ 96.341059][ T7047] netlink: 'syz.3.336': attribute type 2 has an invalid length. [ 96.381928][ T7047] netlink: 'syz.3.336': attribute type 1 has an invalid length. [ 96.454236][ T7054] 8021q: adding VLAN 0 to HW filter on device bond8 [ 97.079707][ T7097] bridge_slave_0: left allmulticast mode [ 97.119041][ T7097] bridge_slave_0: left promiscuous mode [ 97.141217][ T7097] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.187326][ T7097] bridge_slave_1: left allmulticast mode [ 97.207408][ T7097] bridge_slave_1: left promiscuous mode [ 97.230304][ T7097] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.259912][ T7097] bond0: (slave bond_slave_0): Releasing backup interface [ 97.277418][ T7097] bond0: (slave bond_slave_1): Releasing backup interface [ 97.355755][ T7097] team0: Port device team_slave_0 removed [ 97.377991][ T7097] team0: Port device team_slave_1 removed [ 97.386034][ T7097] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.403184][ T7097] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.413845][ T7097] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.429028][ T7097] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.458792][ T7097] bond1: (slave bond2): Releasing backup interface [ 97.491525][ T7097] bond3: (slave bond4): Releasing backup interface [ 97.533572][ T7097] bond5: (slave gretap1): Releasing backup interface [ 97.933598][ T7120] xt_l2tp: invalid flags combination: c [ 98.082946][ T7125] 8021q: adding VLAN 0 to HW filter on device bond9 [ 98.532481][ T7143] netlink: 'syz.3.362': attribute type 32 has an invalid length. [ 98.739959][ T7127] lo speed is unknown, defaulting to 1000 [ 99.217390][ T7156] batadv1: entered allmulticast mode [ 99.263915][ T7159] netlink: 'syz.3.368': attribute type 10 has an invalid length. [ 99.326698][ T7162] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 99.380683][ T7159] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.433412][ T7159] team0: entered promiscuous mode [ 99.472197][ T7159] team_slave_0: entered promiscuous mode [ 99.498102][ T7159] team_slave_1: entered promiscuous mode [ 99.518877][ T7159] team0: entered allmulticast mode [ 99.536335][ T7159] team_slave_0: entered allmulticast mode [ 99.554768][ T7159] team_slave_1: entered allmulticast mode [ 99.594341][ T7159] bond0: (slave team0): Enslaving as an active interface with an up link [ 99.662333][ T7171] 8021q: adding VLAN 0 to HW filter on device bond1 [ 100.563519][ T7182] __nla_validate_parse: 5 callbacks suppressed [ 100.563546][ T7182] netlink: 88 bytes leftover after parsing attributes in process `syz.4.376'. [ 100.692709][ T7187] netlink: 16 bytes leftover after parsing attributes in process `syz.1.377'. [ 100.918131][ T7196] batadv_slave_1: entered promiscuous mode [ 100.944399][ T7194] batadv2: entered allmulticast mode [ 100.971972][ T7196] batadv_slave_1: left promiscuous mode [ 101.145552][ T7204] Bluetooth: MGMT ver 1.23 [ 101.160743][ T7204] tipc: Enabling of bearer rejected, failed to enable media [ 101.886355][ T7240] netlink: 4 bytes leftover after parsing attributes in process `syz.4.394'. [ 102.405151][ T7255] netlink: 8 bytes leftover after parsing attributes in process `syz.4.399'. [ 102.458309][ T7255] vlan2: entered allmulticast mode [ 102.474206][ T7255] veth0_to_batadv: entered allmulticast mode [ 102.728696][ T7253] lo speed is unknown, defaulting to 1000 [ 103.116510][ T7265] netlink: 8 bytes leftover after parsing attributes in process `syz.0.402'. [ 103.125601][ T7265] netlink: 20 bytes leftover after parsing attributes in process `syz.0.402'. [ 103.219112][ T7274] batadv1: entered allmulticast mode [ 104.129589][ T7298] netlink: 8 bytes leftover after parsing attributes in process `syz.4.412'. [ 104.440058][ T7307] netlink: 12 bytes leftover after parsing attributes in process `syz.4.415'. [ 104.473396][ T7307] netlink: 12 bytes leftover after parsing attributes in process `syz.4.415'. [ 104.499829][ T7281] lo speed is unknown, defaulting to 1000 [ 104.522065][ T7310] netlink: 'syz.4.415': attribute type 3 has an invalid length. [ 104.593035][ T7307] bridge0: port 1(vlan3) entered blocking state [ 104.615628][ T7307] bridge0: port 1(vlan3) entered disabled state [ 104.638970][ T7307] vlan3: entered allmulticast mode [ 104.672666][ T7307] vlan3: left allmulticast mode [ 104.930199][ T7291] lo speed is unknown, defaulting to 1000 [ 104.999155][ T8] IPVS: starting estimator thread 0... [ 105.042353][ T7327] netlink: 'syz.4.419': attribute type 1 has an invalid length. [ 105.131944][ T7327] 8021q: adding VLAN 0 to HW filter on device bond10 [ 105.132094][ T7326] IPVS: using max 27 ests per chain, 64800 per kthread [ 105.293309][ T7332] sctp: [Deprecated]: syz.1.421 (pid 7332) Use of int in max_burst socket option. [ 105.293309][ T7332] Use struct sctp_assoc_value instead [ 106.408713][ T7356] netlink: 28 bytes leftover after parsing attributes in process `syz.1.428'. [ 106.425553][ T7357] netlink: 'syz.4.425': attribute type 10 has an invalid length. [ 106.527187][ T7351] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 106.539048][ T7357] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.568875][ T7357] bond0: (slave team0): Enslaving as an active interface with an up link [ 106.625196][ T7360] netlink: 8 bytes leftover after parsing attributes in process `syz.2.426'. [ 107.008203][ T7379] netlink: 'syz.3.433': attribute type 1 has an invalid length. [ 107.067592][ T7379] 8021q: adding VLAN 0 to HW filter on device bond7 [ 107.122352][ T7386] bond7: (slave gretap2): Enslaving as an active interface with an up link [ 107.355682][ T7396] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 107.405660][ T7398] netlink: 'syz.2.434': attribute type 11 has an invalid length. [ 107.648793][ T7403] batadv1: entered allmulticast mode [ 108.155497][ T7419] netlink: 'syz.3.444': attribute type 11 has an invalid length. [ 108.209930][ T7421] netlink: 'syz.1.445': attribute type 1 has an invalid length. [ 108.242699][ T7419] netlink: 32 bytes leftover after parsing attributes in process `syz.3.444'. [ 108.289342][ T7421] 8021q: adding VLAN 0 to HW filter on device bond2 [ 108.342894][ T7424] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 108.430514][ T7427] netlink: 28 bytes leftover after parsing attributes in process `syz.2.446'. [ 108.910463][ T7440] batadv1: entered allmulticast mode [ 108.953439][ T7443] netlink: 32 bytes leftover after parsing attributes in process `syz.0.451'. [ 108.964485][ T7444] @ÿ: renamed from bond_slave_0 [ 109.437452][ T7467] vlan3: entered allmulticast mode [ 109.453257][ T7467] hsr0: entered allmulticast mode [ 109.466207][ T7467] hsr_slave_0: entered allmulticast mode [ 109.472382][ T7467] hsr_slave_1: entered allmulticast mode [ 109.485097][ T7467] hsr0: left allmulticast mode [ 109.490045][ T7467] hsr_slave_0: left allmulticast mode [ 109.495708][ T7467] hsr_slave_1: left allmulticast mode [ 109.540396][ T7471] netlink: 'syz.2.459': attribute type 12 has an invalid length. [ 109.548465][ T7471] netlink: 132 bytes leftover after parsing attributes in process `syz.2.459'. [ 109.683685][ T7478] netlink: 1280 bytes leftover after parsing attributes in process `syz.1.462'. [ 109.703329][ T7476] batadv2: entered allmulticast mode [ 109.980102][ T7491] netlink: 2 bytes leftover after parsing attributes in process `syz.2.467'. [ 109.989863][ T7491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.003568][ T7491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.013967][ T7491] batadv_slave_1: entered promiscuous mode [ 110.183709][ T7497] netlink: 28 bytes leftover after parsing attributes in process `syz.0.469'. [ 111.174462][ T7520] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 111.387263][ T7536] openvswitch: netlink: nsh attr 0 has unexpected len 3 expected 0 [ 111.457113][ T7537] can: request_module (can-proto-3) failed. [ 111.516017][ T7537] netlink: 4 bytes leftover after parsing attributes in process `syz.1.480'. [ 111.746350][ T7554] netlink: 'syz.2.486': attribute type 3 has an invalid length. [ 111.765131][ T7554] netlink: 'syz.2.486': attribute type 1 has an invalid length. [ 111.862330][ T7553] netlink: 'syz.0.484': attribute type 3 has an invalid length. [ 111.899202][ T7553] netlink: 'syz.0.484': attribute type 1 has an invalid length. [ 112.837885][ T7575] netlink: 28 bytes leftover after parsing attributes in process `syz.1.491'. [ 112.863858][ T7575] netlink: 28 bytes leftover after parsing attributes in process `syz.1.491'. [ 112.913954][ T7575] erspan0: entered promiscuous mode [ 112.943522][ T7575] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 112.957477][ T7575] Cannot create hsr debugfs directory [ 113.137385][ T7582] netlink: 8 bytes leftover after parsing attributes in process `syz.1.493'. [ 113.412347][ T5852] Bluetooth: hci4: command 0x0405 tx timeout [ 113.573735][ T7595] netlink: 596 bytes leftover after parsing attributes in process `syz.3.497'. [ 113.624499][ T7597] vlan3: entered allmulticast mode [ 113.642469][ T7597] bond0: entered allmulticast mode [ 113.647634][ T7597] team0: entered allmulticast mode [ 113.685083][ T7597] bridge0: port 1(vlan3) entered blocking state [ 113.702131][ T7597] bridge0: port 1(vlan3) entered disabled state [ 113.723302][ T7597] vlan3: entered promiscuous mode [ 113.735698][ T7597] bond0: entered promiscuous mode [ 113.744515][ T7597] team0: entered promiscuous mode [ 114.110983][ T7608] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 114.164635][ T7610] syz_tun: entered promiscuous mode [ 114.180557][ T7610] vlan4: entered promiscuous mode [ 114.196555][ T7610] syz_tun: left promiscuous mode [ 114.260430][ T7608] bond0: (slave team0): Releasing backup interface [ 114.274815][ T7608] team0: left promiscuous mode [ 114.286509][ T7608] team0: left allmulticast mode [ 114.316128][ T7611] netlink: 'syz.4.503': attribute type 10 has an invalid length. [ 114.472550][ T7614] netlink: 120 bytes leftover after parsing attributes in process `syz.1.505'. [ 114.474450][ T7608] vlan3: left promiscuous mode [ 114.493771][ T7614] netlink: 8 bytes leftover after parsing attributes in process `syz.1.505'. [ 114.523187][ T7614] netlink: 24 bytes leftover after parsing attributes in process `syz.1.505'. [ 114.543844][ T7608] bond0: left promiscuous mode [ 114.562071][ T7608] bridge0: port 1(vlan3) entered disabled state [ 114.580976][ T7619] netlink: 12 bytes leftover after parsing attributes in process `syz.4.503'. [ 114.615503][ T7611] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 114.627556][ T7611] bond0: (slave wlan1): refused to change device type [ 114.692201][ T7601] netem: change failed [ 114.950038][ T7623] bond0: left allmulticast mode [ 114.966960][ T7623] team0: left allmulticast mode [ 114.994801][ T7623] bridge0: port 1(vlan3) entered disabled state [ 115.228978][ T7632] lo: entered allmulticast mode [ 115.251558][ T7632] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 115.296893][ T7636] netlink: 36 bytes leftover after parsing attributes in process `syz.4.511'. [ 115.509984][ T7643] batadv2: entered allmulticast mode [ 116.122782][ T7657] veth1_macvtap: left promiscuous mode [ 116.207773][ T7648] lo speed is unknown, defaulting to 1000 [ 117.193919][ T7679] __nla_validate_parse: 3 callbacks suppressed [ 117.193936][ T7679] netlink: 24 bytes leftover after parsing attributes in process `syz.4.526'. [ 117.347544][ T7650] lo speed is unknown, defaulting to 1000 [ 117.762450][ T7692] SET target dimension over the limit! [ 117.801598][ T7694] netlink: 12 bytes leftover after parsing attributes in process `syz.1.528'. [ 117.842861][ T7688] netlink: 4 bytes leftover after parsing attributes in process `syz.1.528'. [ 117.967010][ T7692] pimreg: entered allmulticast mode [ 118.394565][ T7702] netlink: 20 bytes leftover after parsing attributes in process `syz.4.531'. [ 118.697800][ T7704] netlink: 'syz.4.532': attribute type 1 has an invalid length. [ 119.002556][ T7707] set match dimension is over the limit! [ 119.363970][ T7717] tipc: Started in network mode [ 119.368884][ T7717] tipc: Node identity 00000000000000000000ffffac14142, cluster identity 4711 [ 119.421979][ T7717] tipc: Enabling of bearer rejected, failed to enable media [ 119.453901][ T7721] FAULT_INJECTION: forcing a failure. [ 119.453901][ T7721] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 119.489496][ T7721] CPU: 0 UID: 0 PID: 7721 Comm: syz.3.537 Not tainted 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0 [ 119.489519][ T7721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 119.489529][ T7721] Call Trace: [ 119.489535][ T7721] [ 119.489541][ T7721] dump_stack_lvl+0x241/0x360 [ 119.489571][ T7721] ? __pfx_dump_stack_lvl+0x10/0x10 [ 119.489598][ T7721] ? __pfx__printk+0x10/0x10 [ 119.489617][ T7721] ? __pfx_lock_release+0x10/0x10 [ 119.489646][ T7721] should_fail_ex+0x40a/0x550 [ 119.489673][ T7721] _copy_from_user+0x2d/0xb0 [ 119.489694][ T7721] copy_msghdr_from_user+0xae/0x680 [ 119.489720][ T7721] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 119.489738][ T7721] ? __fget_files+0x2a/0x410 [ 119.489761][ T7721] ? __fget_files+0x2a/0x410 [ 119.489789][ T7721] __sys_sendmsg+0x209/0x350 [ 119.489810][ T7721] ? __pfx___sys_sendmsg+0x10/0x10 [ 119.489837][ T7721] ? do_sys_openat2+0x17a/0x1d0 [ 119.489882][ T7721] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 119.489904][ T7721] ? do_syscall_64+0x100/0x230 [ 119.489926][ T7721] ? do_syscall_64+0xb6/0x230 [ 119.489947][ T7721] do_syscall_64+0xf3/0x230 [ 119.489964][ T7721] ? clear_bhb_loop+0x35/0x90 [ 119.489986][ T7721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.490006][ T7721] RIP: 0033:0x7f2ce8f8d169 [ 119.490020][ T7721] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.490032][ T7721] RSP: 002b:00007f2ce9e0b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 119.490049][ T7721] RAX: ffffffffffffffda RBX: 00007f2ce91a5fa0 RCX: 00007f2ce8f8d169 [ 119.490060][ T7721] RDX: 0000000000000000 RSI: 0000400000000080 RDI: 0000000000000003 [ 119.490069][ T7721] RBP: 00007f2ce9e0b090 R08: 0000000000000000 R09: 0000000000000000 [ 119.490078][ T7721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.490088][ T7721] R13: 0000000000000000 R14: 00007f2ce91a5fa0 R15: 00007ffcbe158948 [ 119.490112][ T7721] [ 120.170545][ T7741] netlink: 8 bytes leftover after parsing attributes in process `syz.3.543'. [ 120.208673][ T7741] netlink: 12 bytes leftover after parsing attributes in process `syz.3.543'. [ 120.233396][ T7743] tipc: Started in network mode [ 120.242035][ T7743] tipc: Node identity 6, cluster identity 4711 [ 120.248206][ T7743] tipc: Node number set to 6 [ 120.525930][ T7749] netlink: 8 bytes leftover after parsing attributes in process `syz.1.546'. [ 121.272659][ T7755] lo speed is unknown, defaulting to 1000 [ 121.301950][ T7776] netlink: 1280 bytes leftover after parsing attributes in process `syz.2.555'. [ 121.662334][ T7787] netlink: 104 bytes leftover after parsing attributes in process `syz.2.557'. [ 121.941073][ T7794] netlink: 12 bytes leftover after parsing attributes in process `syz.3.548'. [ 121.955906][ T7760] lo speed is unknown, defaulting to 1000 [ 122.294061][ T7804] netlink: 12 bytes leftover after parsing attributes in process `syz.1.561'. [ 122.511965][ T7806] batadv3: entered allmulticast mode [ 122.519551][ T7790] lo speed is unknown, defaulting to 1000 [ 123.125185][ T7817] netlink: 16 bytes leftover after parsing attributes in process `syz.2.566'. [ 123.390012][ T7822] netlink: 4 bytes leftover after parsing attributes in process `syz.4.567'. [ 123.463971][ T7824] FAULT_INJECTION: forcing a failure. [ 123.463971][ T7824] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 123.477270][ T7807] lo speed is unknown, defaulting to 1000 [ 123.516328][ T7824] CPU: 1 UID: 0 PID: 7824 Comm: syz.2.569 Not tainted 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0 [ 123.516351][ T7824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 123.516361][ T7824] Call Trace: [ 123.516367][ T7824] [ 123.516374][ T7824] dump_stack_lvl+0x241/0x360 [ 123.516399][ T7824] ? __pfx_dump_stack_lvl+0x10/0x10 [ 123.516417][ T7824] ? __pfx__printk+0x10/0x10 [ 123.516434][ T7824] ? __pfx_lock_release+0x10/0x10 [ 123.516464][ T7824] should_fail_ex+0x40a/0x550 [ 123.516491][ T7824] _copy_from_iter+0x1df/0x1c40 [ 123.516509][ T7824] ? __virt_addr_valid+0x183/0x530 [ 123.516526][ T7824] ? __pfx_lock_release+0x10/0x10 [ 123.516553][ T7824] ? __alloc_skb+0x28f/0x440 [ 123.516569][ T7824] ? __pfx__copy_from_iter+0x10/0x10 [ 123.516589][ T7824] ? __virt_addr_valid+0x183/0x530 [ 123.516604][ T7824] ? __virt_addr_valid+0x183/0x530 [ 123.516618][ T7824] ? __virt_addr_valid+0x45f/0x530 [ 123.516633][ T7824] ? __phys_addr_symbol+0x2f/0x70 [ 123.516648][ T7824] ? __check_object_size+0x47a/0x730 [ 123.516672][ T7824] netlink_sendmsg+0x742/0xcb0 [ 123.516706][ T7824] ? __pfx_netlink_sendmsg+0x10/0x10 [ 123.516731][ T7824] ? aa_sock_msg_perm+0x91/0x160 [ 123.516758][ T7824] ? __pfx_netlink_sendmsg+0x10/0x10 [ 123.516777][ T7824] __sock_sendmsg+0x221/0x270 [ 123.516801][ T7824] ____sys_sendmsg+0x53a/0x860 [ 123.516826][ T7824] ? __pfx_____sys_sendmsg+0x10/0x10 [ 123.516841][ T7824] ? __fget_files+0x2a/0x410 [ 123.516865][ T7824] ? __fget_files+0x2a/0x410 [ 123.516894][ T7824] __sys_sendmsg+0x269/0x350 [ 123.516916][ T7824] ? __pfx___sys_sendmsg+0x10/0x10 [ 123.516946][ T7824] ? do_sys_openat2+0x17a/0x1d0 [ 123.516991][ T7824] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 123.517015][ T7824] ? do_syscall_64+0x100/0x230 [ 123.517036][ T7824] ? do_syscall_64+0xb6/0x230 [ 123.517057][ T7824] do_syscall_64+0xf3/0x230 [ 123.517075][ T7824] ? clear_bhb_loop+0x35/0x90 [ 123.517099][ T7824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.517118][ T7824] RIP: 0033:0x7fcda798d169 [ 123.517133][ T7824] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.517146][ T7824] RSP: 002b:00007fcda87c4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 123.517164][ T7824] RAX: ffffffffffffffda RBX: 00007fcda7ba5fa0 RCX: 00007fcda798d169 [ 123.517183][ T7824] RDX: 0000000000000000 RSI: 0000400000000080 RDI: 0000000000000003 [ 123.517193][ T7824] RBP: 00007fcda87c4090 R08: 0000000000000000 R09: 0000000000000000 [ 123.517203][ T7824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.517212][ T7824] R13: 0000000000000000 R14: 00007fcda7ba5fa0 R15: 00007ffcbabfef08 [ 123.517239][ T7824] [ 123.935060][ T7826] batadv_slave_1: entered promiscuous mode [ 123.949260][ T7826] Bluetooth: MGMT ver 1.23 [ 124.021205][ T7833] netlink: 8 bytes leftover after parsing attributes in process `syz.4.572'. [ 124.050876][ T7825] batadv_slave_1: left promiscuous mode [ 124.092491][ T7833] netlink: 4 bytes leftover after parsing attributes in process `syz.4.572'. [ 124.174011][ T7835] netlink: 4 bytes leftover after parsing attributes in process `syz.1.574'. [ 124.238186][ T7838] netlink: 8 bytes leftover after parsing attributes in process `syz.2.573'. [ 124.288731][ T7838] netlink: 8 bytes leftover after parsing attributes in process `syz.2.573'. [ 124.456810][ T7844] batadv3: entered allmulticast mode [ 124.632134][ T7850] netlink: 24 bytes leftover after parsing attributes in process `syz.3.578'. [ 124.663380][ T7850] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 124.673699][ T7850] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 124.688658][ T7850] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 124.711814][ T7850] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 124.757335][ T7858] netlink: 'syz.2.579': attribute type 3 has an invalid length. [ 124.805954][ T7858] netlink: 'syz.2.579': attribute type 1 has an invalid length. [ 125.026352][ T7869] netlink: 48 bytes leftover after parsing attributes in process `syz.1.583'. [ 125.789068][ T7902] batadv4: entered allmulticast mode [ 125.967055][ T7912] netlink: 'syz.2.593': attribute type 5 has an invalid length. [ 126.152826][ T7920] netlink: 'syz.2.597': attribute type 4 has an invalid length. [ 126.287232][ T7930] netlink: 'syz.3.598': attribute type 3 has an invalid length. [ 126.367527][ T7933] netlink: 'syz.3.598': attribute type 1 has an invalid length. [ 126.708684][ T7948] batadv4: entered allmulticast mode [ 126.721422][ T7949] lo speed is unknown, defaulting to 1000 [ 126.727639][ T7949] lo speed is unknown, defaulting to 1000 [ 126.737827][ T7949] lo speed is unknown, defaulting to 1000 [ 126.807813][ T7949] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 126.878857][ T7949] infiniband s›z0: RDMA CMA: cma_listen_on_dev, error -98 [ 126.958242][ T7949] lo speed is unknown, defaulting to 1000 [ 126.992554][ T7949] lo speed is unknown, defaulting to 1000 [ 127.033591][ T7949] lo speed is unknown, defaulting to 1000 [ 127.048122][ T7949] lo speed is unknown, defaulting to 1000 [ 127.084188][ T7949] lo speed is unknown, defaulting to 1000 [ 127.406631][ T7983] batadv5: entered allmulticast mode [ 127.455245][ T7965] lo speed is unknown, defaulting to 1000 [ 127.595908][ T7990] __nla_validate_parse: 8 callbacks suppressed [ 127.595925][ T7990] netlink: 36 bytes leftover after parsing attributes in process `syz.0.621'. [ 127.689629][ T7965] lo speed is unknown, defaulting to 1000 [ 127.786080][ T7999] netlink: 30 bytes leftover after parsing attributes in process `syz.0.624'. [ 127.807680][ T8003] netlink: 20 bytes leftover after parsing attributes in process `syz.3.623'. [ 127.822266][ T8003] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 127.840286][ T8002] FAULT_INJECTION: forcing a failure. [ 127.840286][ T8002] name failslab, interval 1, probability 0, space 0, times 0 [ 127.862625][ T8002] CPU: 0 UID: 0 PID: 8002 Comm: syz.4.625 Not tainted 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0 [ 127.862647][ T8002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 127.862658][ T8002] Call Trace: [ 127.862663][ T8002] [ 127.862670][ T8002] dump_stack_lvl+0x241/0x360 [ 127.862694][ T8002] ? __pfx_dump_stack_lvl+0x10/0x10 [ 127.862712][ T8002] ? __pfx__printk+0x10/0x10 [ 127.862737][ T8002] ? __kmalloc_cache_noprof+0x48/0x390 [ 127.862760][ T8002] ? __pfx___might_resched+0x10/0x10 [ 127.862781][ T8002] should_fail_ex+0x40a/0x550 [ 127.862802][ T8002] should_failslab+0xac/0x100 [ 127.862819][ T8002] __kmalloc_cache_noprof+0x70/0x390 [ 127.862834][ T8002] ? nfnetlink_rcv+0x1265/0x2ab0 [ 127.862850][ T8002] nfnetlink_rcv+0x1265/0x2ab0 [ 127.862886][ T8002] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 127.862936][ T8002] ? netlink_deliver_tap+0x2e/0x1b0 [ 127.862951][ T8002] ? skb_clone+0x240/0x390 [ 127.862964][ T8002] ? __pfx_lock_release+0x10/0x10 [ 127.862992][ T8002] ? netlink_deliver_tap+0x2e/0x1b0 [ 127.863010][ T8002] netlink_unicast+0x7f6/0x990 [ 127.863030][ T8002] ? __pfx_netlink_unicast+0x10/0x10 [ 127.863043][ T8002] ? __virt_addr_valid+0x45f/0x530 [ 127.863056][ T8002] ? __phys_addr_symbol+0x2f/0x70 [ 127.863067][ T8002] ? __check_object_size+0x47a/0x730 [ 127.863086][ T8002] netlink_sendmsg+0x8de/0xcb0 [ 127.863110][ T8002] ? __pfx_netlink_sendmsg+0x10/0x10 [ 127.863134][ T8002] ? aa_sock_msg_perm+0x91/0x160 [ 127.863155][ T8002] ? __pfx_netlink_sendmsg+0x10/0x10 [ 127.863170][ T8002] __sock_sendmsg+0x221/0x270 [ 127.863188][ T8002] ____sys_sendmsg+0x53a/0x860 [ 127.863207][ T8002] ? __pfx_____sys_sendmsg+0x10/0x10 [ 127.863218][ T8002] ? __fget_files+0x2a/0x410 [ 127.863237][ T8002] ? __fget_files+0x2a/0x410 [ 127.863259][ T8002] __sys_sendmsg+0x269/0x350 [ 127.863275][ T8002] ? __pfx___sys_sendmsg+0x10/0x10 [ 127.863298][ T8002] ? do_sys_openat2+0x17a/0x1d0 [ 127.863332][ T8002] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 127.863350][ T8002] ? do_syscall_64+0x100/0x230 [ 127.863367][ T8002] ? do_syscall_64+0xb6/0x230 [ 127.863383][ T8002] do_syscall_64+0xf3/0x230 [ 127.863397][ T8002] ? clear_bhb_loop+0x35/0x90 [ 127.863416][ T8002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.863431][ T8002] RIP: 0033:0x7f0114d8d169 [ 127.863442][ T8002] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.863452][ T8002] RSP: 002b:00007f0115c58038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 127.863466][ T8002] RAX: ffffffffffffffda RBX: 00007f0114fa5fa0 RCX: 00007f0114d8d169 [ 127.863475][ T8002] RDX: 0000000000000000 RSI: 0000400000000080 RDI: 0000000000000003 [ 127.863483][ T8002] RBP: 00007f0115c58090 R08: 0000000000000000 R09: 0000000000000000 [ 127.863491][ T8002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.863498][ T8002] R13: 0000000000000000 R14: 00007f0114fa5fa0 R15: 00007ffe05b99388 [ 127.863517][ T8002] [ 128.752657][ T8030] netlink: 64 bytes leftover after parsing attributes in process `syz.3.633'. [ 128.896395][ T8036] netlink: 36 bytes leftover after parsing attributes in process `syz.1.634'. [ 129.017459][ T8045] FAULT_INJECTION: forcing a failure. [ 129.017459][ T8045] name failslab, interval 1, probability 0, space 0, times 0 [ 129.050843][ T8045] CPU: 1 UID: 0 PID: 8045 Comm: syz.0.637 Not tainted 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0 [ 129.050867][ T8045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 129.050876][ T8045] Call Trace: [ 129.050882][ T8045] [ 129.050889][ T8045] dump_stack_lvl+0x241/0x360 [ 129.050914][ T8045] ? __pfx_dump_stack_lvl+0x10/0x10 [ 129.050931][ T8045] ? __pfx__printk+0x10/0x10 [ 129.050949][ T8045] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 129.050972][ T8045] ? __pfx___might_resched+0x10/0x10 [ 129.050997][ T8045] should_fail_ex+0x40a/0x550 [ 129.051024][ T8045] should_failslab+0xac/0x100 [ 129.051045][ T8045] kmem_cache_alloc_node_noprof+0x77/0x380 [ 129.051065][ T8045] ? __alloc_skb+0x1c3/0x440 [ 129.051085][ T8045] __alloc_skb+0x1c3/0x440 [ 129.051105][ T8045] ? __pfx___alloc_skb+0x10/0x10 [ 129.051126][ T8045] ? netlink_ack_tlv_len+0x6e/0x200 [ 129.051148][ T8045] netlink_ack+0x145/0xa60 [ 129.051173][ T8045] ? __kasan_kmalloc+0x98/0xb0 [ 129.051192][ T8045] ? nfnetlink_rcv+0x12c6/0x2ab0 [ 129.051213][ T8045] nfnetlink_rcv+0x26bd/0x2ab0 [ 129.051260][ T8045] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 129.051321][ T8045] ? netlink_deliver_tap+0x2e/0x1b0 [ 129.051343][ T8045] ? skb_clone+0x240/0x390 [ 129.051360][ T8045] ? __pfx_lock_release+0x10/0x10 [ 129.051395][ T8045] ? netlink_deliver_tap+0x2e/0x1b0 [ 129.051417][ T8045] netlink_unicast+0x7f6/0x990 [ 129.051444][ T8045] ? __pfx_netlink_unicast+0x10/0x10 [ 129.051460][ T8045] ? __virt_addr_valid+0x45f/0x530 [ 129.051477][ T8045] ? __phys_addr_symbol+0x2f/0x70 [ 129.051491][ T8045] ? __check_object_size+0x47a/0x730 [ 129.051515][ T8045] netlink_sendmsg+0x8de/0xcb0 [ 129.051547][ T8045] ? __pfx_netlink_sendmsg+0x10/0x10 [ 129.051572][ T8045] ? aa_sock_msg_perm+0x91/0x160 [ 129.051600][ T8045] ? __pfx_netlink_sendmsg+0x10/0x10 [ 129.051618][ T8045] __sock_sendmsg+0x221/0x270 [ 129.051642][ T8045] ____sys_sendmsg+0x53a/0x860 [ 129.051666][ T8045] ? __pfx_____sys_sendmsg+0x10/0x10 [ 129.051681][ T8045] ? __fget_files+0x2a/0x410 [ 129.051711][ T8045] ? __fget_files+0x2a/0x410 [ 129.051739][ T8045] __sys_sendmsg+0x269/0x350 [ 129.051760][ T8045] ? __pfx___sys_sendmsg+0x10/0x10 [ 129.051786][ T8045] ? do_sys_openat2+0x17a/0x1d0 [ 129.051829][ T8045] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 129.051852][ T8045] ? do_syscall_64+0x100/0x230 [ 129.051873][ T8045] ? do_syscall_64+0xb6/0x230 [ 129.051892][ T8045] do_syscall_64+0xf3/0x230 [ 129.051909][ T8045] ? clear_bhb_loop+0x35/0x90 [ 129.051932][ T8045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.051950][ T8045] RIP: 0033:0x7fb0adb8d169 [ 129.051964][ T8045] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.051977][ T8045] RSP: 002b:00007fb0ae97c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 129.051994][ T8045] RAX: ffffffffffffffda RBX: 00007fb0adda5fa0 RCX: 00007fb0adb8d169 [ 129.052005][ T8045] RDX: 0000000000000000 RSI: 0000400000000080 RDI: 0000000000000003 [ 129.052015][ T8045] RBP: 00007fb0ae97c090 R08: 0000000000000000 R09: 0000000000000000 [ 129.052025][ T8045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.052034][ T8045] R13: 0000000000000000 R14: 00007fb0adda5fa0 R15: 00007fff94f4eb48 [ 129.052059][ T8045] [ 129.448120][ T8052] netlink: 8 bytes leftover after parsing attributes in process `syz.1.639'. [ 129.549207][ T8057] netlink: 8 bytes leftover after parsing attributes in process `syz.0.642'. [ 129.660038][ T8057] netlink: 12 bytes leftover after parsing attributes in process `syz.0.642'. [ 129.757273][ T8075] lo: left allmulticast mode [ 129.774687][ T8072] netlink: 'syz.3.644': attribute type 1 has an invalid length. [ 130.248493][ T8075] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.264788][ T8075] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.291239][ T8075] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.300320][ T8075] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.382141][ T8107] netlink: 36 bytes leftover after parsing attributes in process `syz.4.648'. [ 130.427947][ T8075] batadv1: left allmulticast mode [ 130.468911][ T25] lo speed is unknown, defaulting to 1000 [ 130.491845][ T8085] netlink: 40 bytes leftover after parsing attributes in process `syz.2.647'. [ 130.686743][ T8113] FAULT_INJECTION: forcing a failure. [ 130.686743][ T8113] name failslab, interval 1, probability 0, space 0, times 0 [ 130.736463][ T8113] CPU: 1 UID: 0 PID: 8113 Comm: syz.2.650 Not tainted 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0 [ 130.736491][ T8113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 130.736500][ T8113] Call Trace: [ 130.736506][ T8113] [ 130.736513][ T8113] dump_stack_lvl+0x241/0x360 [ 130.736537][ T8113] ? __pfx_dump_stack_lvl+0x10/0x10 [ 130.736554][ T8113] ? __pfx__printk+0x10/0x10 [ 130.736571][ T8113] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 130.736598][ T8113] ? __pfx___might_resched+0x10/0x10 [ 130.736616][ T8113] ? aa_label_sk_perm+0x4f3/0x6c0 [ 130.736641][ T8113] should_fail_ex+0x40a/0x550 [ 130.736671][ T8113] should_failslab+0xac/0x100 [ 130.736700][ T8113] kmem_cache_alloc_node_noprof+0x77/0x380 [ 130.736720][ T8113] ? __alloc_skb+0x1c3/0x440 [ 130.736740][ T8113] __alloc_skb+0x1c3/0x440 [ 130.736760][ T8113] ? __pfx___alloc_skb+0x10/0x10 [ 130.736784][ T8113] netlink_sendmsg+0x634/0xcb0 [ 130.736816][ T8113] ? __pfx_netlink_sendmsg+0x10/0x10 [ 130.736840][ T8113] ? aa_sock_msg_perm+0x91/0x160 [ 130.736868][ T8113] ? __pfx_netlink_sendmsg+0x10/0x10 [ 130.736886][ T8113] __sock_sendmsg+0x221/0x270 [ 130.736909][ T8113] ____sys_sendmsg+0x53a/0x860 [ 130.736934][ T8113] ? __pfx_____sys_sendmsg+0x10/0x10 [ 130.736949][ T8113] ? __fget_files+0x2a/0x410 [ 130.736973][ T8113] ? __fget_files+0x2a/0x410 [ 130.737002][ T8113] __sys_sendmsg+0x269/0x350 [ 130.737023][ T8113] ? __pfx___sys_sendmsg+0x10/0x10 [ 130.737052][ T8113] ? do_sys_openat2+0x17a/0x1d0 [ 130.737097][ T8113] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 130.737120][ T8113] ? do_syscall_64+0x100/0x230 [ 130.737142][ T8113] ? do_syscall_64+0xb6/0x230 [ 130.737163][ T8113] do_syscall_64+0xf3/0x230 [ 130.737181][ T8113] ? clear_bhb_loop+0x35/0x90 [ 130.737204][ T8113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.737223][ T8113] RIP: 0033:0x7fcda798d169 [ 130.737238][ T8113] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.737251][ T8113] RSP: 002b:00007fcda87c4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 130.737269][ T8113] RAX: ffffffffffffffda RBX: 00007fcda7ba5fa0 RCX: 00007fcda798d169 [ 130.737280][ T8113] RDX: 0000000000000000 RSI: 0000400000000300 RDI: 0000000000000004 [ 130.737290][ T8113] RBP: 00007fcda87c4090 R08: 0000000000000000 R09: 0000000000000000 [ 130.737300][ T8113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 130.737309][ T8113] R13: 0000000000000000 R14: 00007fcda7ba5fa0 R15: 00007ffcbabfef08 [ 130.737335][ T8113] [ 130.788412][ T8119] x_tables: duplicate underflow at hook 1 [ 132.497176][ T8117] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 132.526260][ T8117] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 132.719420][ T8134] __nla_validate_parse: 4 callbacks suppressed [ 132.719437][ T8134] netlink: 4 bytes leftover after parsing attributes in process `syz.3.658'. [ 132.729544][ T8135] tipc: Can't bind to reserved service type 0 [ 132.795856][ T8131] netlink: 16 bytes leftover after parsing attributes in process `syz.4.657'. [ 133.006144][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.012617][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.147291][ T8155] netlink: 'syz.4.661': attribute type 11 has an invalid length. [ 133.389502][ T8157] batadv2: entered allmulticast mode [ 133.619686][ T8140] lo speed is unknown, defaulting to 1000 [ 133.977185][ T8164] netlink: 8 bytes leftover after parsing attributes in process `syz.1.668'. [ 134.003067][ T8164] openvswitch: netlink: VXLAN extension 256 out of range max 1 [ 134.215649][ T8176] batadv_slave_1: entered promiscuous mode [ 134.246171][ T8173] netlink: 48 bytes leftover after parsing attributes in process `syz.1.669'. [ 134.255366][ T8173] netlink: 24 bytes leftover after parsing attributes in process `syz.1.669'. [ 134.373777][ T8151] lo speed is unknown, defaulting to 1000 [ 134.377646][ T8181] netlink: 'syz.0.673': attribute type 1 has an invalid length. [ 134.381427][ T8140] lo speed is unknown, defaulting to 1000 [ 134.530779][ T8186] netlink: 40 bytes leftover after parsing attributes in process `syz.1.672'. [ 134.550837][ T8187] netlink: 12 bytes leftover after parsing attributes in process `syz.0.673'. [ 134.608229][ T8181] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 134.633098][ T8181] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 134.641573][ T8181] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 134.650078][ T8181] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 134.676994][ T8181] bond2: (slave geneve2): making interface the new active one [ 134.703622][ T8181] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 134.745600][ T8187] 8021q: adding VLAN 0 to HW filter on device bond2 [ 134.762552][ T8150] lo speed is unknown, defaulting to 1000 [ 134.772717][ T8151] lo speed is unknown, defaulting to 1000 [ 134.846183][ T8192] batadv6: entered allmulticast mode [ 134.924764][ T8194] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 134.959540][ T8195] syz.0.676 uses old SIOCAX25GETINFO [ 134.998676][ T8197] netlink: 16 bytes leftover after parsing attributes in process `syz.4.677'. [ 135.052738][ T8197] ip6gretap0: entered promiscuous mode [ 135.060534][ T8197] ip6gretap0: left promiscuous mode [ 135.167496][ T8143] lo speed is unknown, defaulting to 1000 [ 135.369979][ T8143] lo speed is unknown, defaulting to 1000 [ 135.380481][ T8150] lo speed is unknown, defaulting to 1000 [ 135.693249][ T8217] netlink: 12 bytes leftover after parsing attributes in process `syz.0.682'. [ 135.713143][ T8219] FAULT_INJECTION: forcing a failure. [ 135.713143][ T8219] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 135.721258][ T8217] netlink: 12 bytes leftover after parsing attributes in process `syz.0.682'. [ 135.815705][ T8219] CPU: 1 UID: 0 PID: 8219 Comm: syz.1.684 Not tainted 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0 [ 135.815728][ T8219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 135.815738][ T8219] Call Trace: [ 135.815743][ T8219] [ 135.815750][ T8219] dump_stack_lvl+0x241/0x360 [ 135.815776][ T8219] ? __pfx_dump_stack_lvl+0x10/0x10 [ 135.815793][ T8219] ? __pfx__printk+0x10/0x10 [ 135.815811][ T8219] ? __pfx_lock_release+0x10/0x10 [ 135.815841][ T8219] should_fail_ex+0x40a/0x550 [ 135.815867][ T8219] _copy_from_user+0x2d/0xb0 [ 135.815888][ T8219] copy_msghdr_from_user+0xae/0x680 [ 135.815922][ T8219] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 135.815940][ T8219] ? __fget_files+0x2a/0x410 [ 135.815965][ T8219] ? __fget_files+0x2a/0x410 [ 135.815994][ T8219] __sys_sendmsg+0x209/0x350 [ 135.816016][ T8219] ? __pfx___sys_sendmsg+0x10/0x10 [ 135.816044][ T8219] ? do_sys_openat2+0x17a/0x1d0 [ 135.816088][ T8219] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 135.816111][ T8219] ? do_syscall_64+0x100/0x230 [ 135.816131][ T8219] ? do_syscall_64+0xb6/0x230 [ 135.816150][ T8219] do_syscall_64+0xf3/0x230 [ 135.816165][ T8219] ? clear_bhb_loop+0x35/0x90 [ 135.816187][ T8219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.816205][ T8219] RIP: 0033:0x7f1f8c58d169 [ 135.816218][ T8219] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.816230][ T8219] RSP: 002b:00007f1f8d43c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 135.816247][ T8219] RAX: ffffffffffffffda RBX: 00007f1f8c7a5fa0 RCX: 00007f1f8c58d169 [ 135.816258][ T8219] RDX: 0000000000000000 RSI: 0000400000000280 RDI: 0000000000000003 [ 135.816268][ T8219] RBP: 00007f1f8d43c090 R08: 0000000000000000 R09: 0000000000000000 [ 135.816278][ T8219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.816287][ T8219] R13: 0000000000000000 R14: 00007f1f8c7a5fa0 R15: 00007fff84105048 [ 135.816310][ T8219] [ 136.306912][ T8226] nbd: must specify a size in bytes for the device [ 136.599711][ T8238] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 136.725291][ T8222] lo speed is unknown, defaulting to 1000 [ 136.952637][ T8222] lo speed is unknown, defaulting to 1000 [ 137.156515][ T8252] netlink: 'syz.2.692': attribute type 1 has an invalid length. [ 137.591234][ T8255] lo speed is unknown, defaulting to 1000 [ 137.975143][ T8280] bridge1: entered promiscuous mode [ 138.008749][ T8280] bridge1: entered allmulticast mode [ 138.036415][ T8280] team0: Device bridge1 is up. Set it down before adding it as a team port [ 138.167903][ T8288] openvswitch: netlink: Actions may not be safe on all matching packets [ 138.195993][ T8255] lo speed is unknown, defaulting to 1000 [ 138.579264][ T8258] lo speed is unknown, defaulting to 1000 [ 138.703717][ T8305] __nla_validate_parse: 68 callbacks suppressed [ 138.703737][ T8305] netlink: 8 bytes leftover after parsing attributes in process `syz.2.709'. [ 138.917956][ T8258] lo speed is unknown, defaulting to 1000 [ 139.336273][ T8322] ieee802154 phy0 wpan0: encryption failed: -90 [ 139.376702][ T8322] ieee802154 phy0 wpan0: encryption failed: -90 [ 139.459734][ T8328] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 139.467420][ T8328] IPv6: NLM_F_CREATE should be set when creating new route [ 139.474672][ T8328] IPv6: NLM_F_CREATE should be set when creating new route [ 139.481913][ T8328] IPv6: NLM_F_CREATE should be set when creating new route [ 139.504074][ T8326] netlink: 188 bytes leftover after parsing attributes in process `syz.2.716'. [ 139.513300][ T8326] netlink: 'syz.2.716': attribute type 1 has an invalid length. [ 139.562103][ T8332] FAULT_INJECTION: forcing a failure. [ 139.562103][ T8332] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 139.618187][ T8332] CPU: 0 UID: 0 PID: 8332 Comm: syz.0.718 Not tainted 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0 [ 139.618213][ T8332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 139.618223][ T8332] Call Trace: [ 139.618228][ T8332] [ 139.618234][ T8332] dump_stack_lvl+0x241/0x360 [ 139.618255][ T8332] ? __pfx_dump_stack_lvl+0x10/0x10 [ 139.618269][ T8332] ? __pfx__printk+0x10/0x10 [ 139.618283][ T8332] ? __pfx_lock_release+0x10/0x10 [ 139.618306][ T8332] should_fail_ex+0x40a/0x550 [ 139.618327][ T8332] _copy_from_iter+0x1df/0x1c40 [ 139.618341][ T8332] ? __virt_addr_valid+0x183/0x530 [ 139.618354][ T8332] ? __pfx_lock_release+0x10/0x10 [ 139.618375][ T8332] ? __alloc_skb+0x28f/0x440 [ 139.618387][ T8332] ? __pfx__copy_from_iter+0x10/0x10 [ 139.618402][ T8332] ? __virt_addr_valid+0x183/0x530 [ 139.618413][ T8332] ? __virt_addr_valid+0x183/0x530 [ 139.618423][ T8332] ? __virt_addr_valid+0x45f/0x530 [ 139.618435][ T8332] ? __phys_addr_symbol+0x2f/0x70 [ 139.618446][ T8332] ? __check_object_size+0x47a/0x730 [ 139.618464][ T8332] netlink_sendmsg+0x742/0xcb0 [ 139.618489][ T8332] ? __pfx_netlink_sendmsg+0x10/0x10 [ 139.618508][ T8332] ? aa_sock_msg_perm+0x91/0x160 [ 139.618530][ T8332] ? __pfx_netlink_sendmsg+0x10/0x10 [ 139.618545][ T8332] __sock_sendmsg+0x221/0x270 [ 139.618564][ T8332] ____sys_sendmsg+0x53a/0x860 [ 139.618582][ T8332] ? __pfx_____sys_sendmsg+0x10/0x10 [ 139.618594][ T8332] ? __fget_files+0x2a/0x410 [ 139.618612][ T8332] ? __fget_files+0x2a/0x410 [ 139.618634][ T8332] __sys_sendmsg+0x269/0x350 [ 139.618650][ T8332] ? __pfx___sys_sendmsg+0x10/0x10 [ 139.618690][ T8332] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 139.618708][ T8332] ? do_syscall_64+0x100/0x230 [ 139.618725][ T8332] ? do_syscall_64+0xb6/0x230 [ 139.618741][ T8332] do_syscall_64+0xf3/0x230 [ 139.618755][ T8332] ? clear_bhb_loop+0x35/0x90 [ 139.618779][ T8332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.618794][ T8332] RIP: 0033:0x7fb0adb8d169 [ 139.618806][ T8332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 139.618816][ T8332] RSP: 002b:00007fb0ae97c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 139.618830][ T8332] RAX: ffffffffffffffda RBX: 00007fb0adda5fa0 RCX: 00007fb0adb8d169 [ 139.618838][ T8332] RDX: 0000000000000000 RSI: 0000400000000280 RDI: 0000000000000003 [ 139.618846][ T8332] RBP: 00007fb0ae97c090 R08: 0000000000000000 R09: 0000000000000000 [ 139.618854][ T8332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.618861][ T8332] R13: 0000000000000000 R14: 00007fb0adda5fa0 R15: 00007fff94f4eb48 [ 139.618880][ T8332] [ 140.039258][ T8341] sch_tbf: burst 7164 is lower than device lo mtu (39799) ! [ 140.206869][ T8348] FAULT_INJECTION: forcing a failure. [ 140.206869][ T8348] name failslab, interval 1, probability 0, space 0, times 0 [ 140.276511][ T8348] CPU: 0 UID: 0 PID: 8348 Comm: syz.3.722 Not tainted 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0 [ 140.276536][ T8348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 140.276546][ T8348] Call Trace: [ 140.276551][ T8348] [ 140.276558][ T8348] dump_stack_lvl+0x241/0x360 [ 140.276585][ T8348] ? __pfx_dump_stack_lvl+0x10/0x10 [ 140.276602][ T8348] ? __pfx__printk+0x10/0x10 [ 140.276622][ T8348] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 140.276644][ T8348] ? __pfx___might_resched+0x10/0x10 [ 140.276669][ T8348] should_fail_ex+0x40a/0x550 [ 140.276697][ T8348] should_failslab+0xac/0x100 [ 140.276726][ T8348] kmem_cache_alloc_node_noprof+0x77/0x380 [ 140.276746][ T8348] ? __alloc_skb+0x1c3/0x440 [ 140.276766][ T8348] __alloc_skb+0x1c3/0x440 [ 140.276787][ T8348] ? __pfx___alloc_skb+0x10/0x10 [ 140.276807][ T8348] ? batadv_netlink_get_hardif_from_ifindex+0x12c/0x1e0 [ 140.276832][ T8348] batadv_netlink_set_hardif+0x242/0x460 [ 140.276856][ T8348] genl_rcv_msg+0xb1f/0xec0 [ 140.276883][ T8348] ? __pfx_genl_rcv_msg+0x10/0x10 [ 140.276928][ T8348] ? __pfx_lock_acquire+0x10/0x10 [ 140.276950][ T8348] ? __pfx_batadv_pre_doit+0x10/0x10 [ 140.276966][ T8348] ? __pfx_batadv_netlink_set_hardif+0x10/0x10 [ 140.276985][ T8348] ? __pfx_batadv_post_doit+0x10/0x10 [ 140.277005][ T8348] ? __pfx___might_resched+0x10/0x10 [ 140.277036][ T8348] netlink_rcv_skb+0x206/0x480 [ 140.277058][ T8348] ? __pfx_genl_rcv_msg+0x10/0x10 [ 140.277075][ T8348] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 140.277107][ T8348] ? __netlink_deliver_tap+0x7b0/0x7f0 [ 140.277142][ T8348] genl_rcv+0x28/0x40 [ 140.277157][ T8348] netlink_unicast+0x7f6/0x990 [ 140.277184][ T8348] ? __pfx_netlink_unicast+0x10/0x10 [ 140.277201][ T8348] ? __virt_addr_valid+0x45f/0x530 [ 140.277217][ T8348] ? __phys_addr_symbol+0x2f/0x70 [ 140.277231][ T8348] ? __check_object_size+0x47a/0x730 [ 140.277256][ T8348] netlink_sendmsg+0x8de/0xcb0 [ 140.277288][ T8348] ? __pfx_netlink_sendmsg+0x10/0x10 [ 140.277311][ T8348] ? aa_sock_msg_perm+0x91/0x160 [ 140.277338][ T8348] ? __pfx_netlink_sendmsg+0x10/0x10 [ 140.277355][ T8348] __sock_sendmsg+0x221/0x270 [ 140.277377][ T8348] ____sys_sendmsg+0x53a/0x860 [ 140.277401][ T8348] ? __pfx_____sys_sendmsg+0x10/0x10 [ 140.277415][ T8348] ? __fget_files+0x2a/0x410 [ 140.277438][ T8348] ? __fget_files+0x2a/0x410 [ 140.277466][ T8348] __sys_sendmsg+0x269/0x350 [ 140.277487][ T8348] ? __pfx___sys_sendmsg+0x10/0x10 [ 140.277513][ T8348] ? do_sys_openat2+0x17a/0x1d0 [ 140.277557][ T8348] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 140.277578][ T8348] ? do_syscall_64+0x100/0x230 [ 140.277597][ T8348] ? do_syscall_64+0xb6/0x230 [ 140.277616][ T8348] do_syscall_64+0xf3/0x230 [ 140.277633][ T8348] ? clear_bhb_loop+0x35/0x90 [ 140.277655][ T8348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.277674][ T8348] RIP: 0033:0x7f2ce8f8d169 [ 140.277688][ T8348] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.277700][ T8348] RSP: 002b:00007f2ce9e0b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 140.277723][ T8348] RAX: ffffffffffffffda RBX: 00007f2ce91a5fa0 RCX: 00007f2ce8f8d169 [ 140.277734][ T8348] RDX: 0000000000000000 RSI: 0000400000000300 RDI: 0000000000000004 [ 140.277744][ T8348] RBP: 00007f2ce9e0b090 R08: 0000000000000000 R09: 0000000000000000 [ 140.277754][ T8348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.277763][ T8348] R13: 0000000000000000 R14: 00007f2ce91a5fa0 R15: 00007ffcbe158948 [ 140.277790][ T8348] [ 140.917624][ T8352] netlink: 24 bytes leftover after parsing attributes in process `syz.4.723'. [ 140.969637][ T8352] IPVS: length: 24 != 3221225496 [ 141.114961][ T8364] syzkaller0: entered promiscuous mode [ 141.120569][ T8364] syzkaller0: entered allmulticast mode [ 141.194655][ T8373] FAULT_INJECTION: forcing a failure. [ 141.194655][ T8373] name failslab, interval 1, probability 0, space 0, times 0 [ 141.229668][ T8378] netlink: 'syz.2.730': attribute type 1 has an invalid length. [ 141.232521][ T8373] CPU: 1 UID: 0 PID: 8373 Comm: syz.4.731 Not tainted 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0 [ 141.232542][ T8373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 141.232552][ T8373] Call Trace: [ 141.232558][ T8373] [ 141.232565][ T8373] dump_stack_lvl+0x241/0x360 [ 141.232591][ T8373] ? __pfx_dump_stack_lvl+0x10/0x10 [ 141.232608][ T8373] ? __pfx__printk+0x10/0x10 [ 141.232637][ T8373] should_fail_ex+0x40a/0x550 [ 141.232664][ T8373] should_failslab+0xac/0x100 [ 141.232685][ T8373] ? skb_clone+0x20c/0x390 [ 141.232700][ T8373] kmem_cache_alloc_noprof+0x70/0x380 [ 141.232726][ T8373] skb_clone+0x20c/0x390 [ 141.232746][ T8373] __netlink_deliver_tap+0x3c4/0x7f0 [ 141.232777][ T8373] ? netlink_deliver_tap+0x2e/0x1b0 [ 141.232795][ T8373] netlink_deliver_tap+0x19d/0x1b0 [ 141.232816][ T8373] netlink_unicast+0x7c4/0x990 [ 141.232842][ T8373] ? __pfx_netlink_unicast+0x10/0x10 [ 141.232858][ T8373] ? __virt_addr_valid+0x45f/0x530 [ 141.232874][ T8373] ? __phys_addr_symbol+0x2f/0x70 [ 141.232888][ T8373] ? __check_object_size+0x47a/0x730 [ 141.232917][ T8373] netlink_sendmsg+0x8de/0xcb0 [ 141.232948][ T8373] ? __pfx_netlink_sendmsg+0x10/0x10 [ 141.232972][ T8373] ? aa_sock_msg_perm+0x91/0x160 [ 141.232998][ T8373] ? __pfx_netlink_sendmsg+0x10/0x10 [ 141.233016][ T8373] __sock_sendmsg+0x221/0x270 [ 141.233039][ T8373] ____sys_sendmsg+0x53a/0x860 [ 141.233063][ T8373] ? __pfx_____sys_sendmsg+0x10/0x10 [ 141.233077][ T8373] ? __fget_files+0x2a/0x410 [ 141.233101][ T8373] ? __fget_files+0x2a/0x410 [ 141.233129][ T8373] __sys_sendmsg+0x269/0x350 [ 141.233150][ T8373] ? __pfx___sys_sendmsg+0x10/0x10 [ 141.233178][ T8373] ? do_sys_openat2+0x17a/0x1d0 [ 141.233223][ T8373] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 141.233246][ T8373] ? do_syscall_64+0x100/0x230 [ 141.233267][ T8373] ? do_syscall_64+0xb6/0x230 [ 141.233287][ T8373] do_syscall_64+0xf3/0x230 [ 141.233305][ T8373] ? clear_bhb_loop+0x35/0x90 [ 141.233327][ T8373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.233345][ T8373] RIP: 0033:0x7f0114d8d169 [ 141.233366][ T8373] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.233379][ T8373] RSP: 002b:00007f0115c58038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 141.233396][ T8373] RAX: ffffffffffffffda RBX: 00007f0114fa5fa0 RCX: 00007f0114d8d169 [ 141.233407][ T8373] RDX: 0000000000000000 RSI: 0000400000000280 RDI: 0000000000000003 [ 141.233417][ T8373] RBP: 00007f0115c58090 R08: 0000000000000000 R09: 0000000000000000 [ 141.233426][ T8373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 141.233436][ T8373] R13: 0000000000000000 R14: 00007f0114fa5fa0 R15: 00007ffe05b99388 [ 141.233461][ T8373] [ 141.233616][ T8373] netlink: 8 bytes leftover after parsing attributes in process `syz.4.731'. [ 141.264088][ T8378] netlink: 134744 bytes leftover after parsing attributes in process `syz.2.730'. [ 141.623378][ T8385] netlink: 48 bytes leftover after parsing attributes in process `syz.1.733'. [ 141.726989][ T8388] netlink: 48 bytes leftover after parsing attributes in process `syz.4.735'. [ 141.806798][ T8396] FAULT_INJECTION: forcing a failure. [ 141.806798][ T8396] name failslab, interval 1, probability 0, space 0, times 0 [ 141.843298][ T8396] CPU: 1 UID: 0 PID: 8396 Comm: syz.0.737 Not tainted 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0 [ 141.843330][ T8396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 141.843340][ T8396] Call Trace: [ 141.843347][ T8396] [ 141.843354][ T8396] dump_stack_lvl+0x241/0x360 [ 141.843379][ T8396] ? __pfx_dump_stack_lvl+0x10/0x10 [ 141.843396][ T8396] ? __pfx__printk+0x10/0x10 [ 141.843414][ T8396] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 141.843436][ T8396] ? __pfx___might_resched+0x10/0x10 [ 141.843460][ T8396] should_fail_ex+0x40a/0x550 [ 141.843487][ T8396] should_failslab+0xac/0x100 [ 141.843508][ T8396] kmem_cache_alloc_node_noprof+0x77/0x380 [ 141.843529][ T8396] ? __alloc_skb+0x1c3/0x440 [ 141.843549][ T8396] __alloc_skb+0x1c3/0x440 [ 141.843563][ T8396] ? ____sys_sendmsg+0x53a/0x860 [ 141.843583][ T8396] ? __pfx___alloc_skb+0x10/0x10 [ 141.843605][ T8396] ? netlink_ack_tlv_len+0x6e/0x200 [ 141.843626][ T8396] netlink_ack+0x145/0xa60 [ 141.843643][ T8396] ? __pfx_lock_acquire+0x10/0x10 [ 141.843664][ T8396] ? __pfx_batadv_netlink_set_hardif+0x10/0x10 [ 141.843686][ T8396] ? __pfx___might_resched+0x10/0x10 [ 141.843715][ T8396] netlink_rcv_skb+0x294/0x480 [ 141.843736][ T8396] ? __pfx_genl_rcv_msg+0x10/0x10 [ 141.843755][ T8396] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 141.843788][ T8396] ? __netlink_deliver_tap+0x7b0/0x7f0 [ 141.843822][ T8396] genl_rcv+0x28/0x40 [ 141.843836][ T8396] netlink_unicast+0x7f6/0x990 [ 141.843863][ T8396] ? __pfx_netlink_unicast+0x10/0x10 [ 141.843879][ T8396] ? __virt_addr_valid+0x45f/0x530 [ 141.843896][ T8396] ? __phys_addr_symbol+0x2f/0x70 [ 141.843911][ T8396] ? __check_object_size+0x47a/0x730 [ 141.843937][ T8396] netlink_sendmsg+0x8de/0xcb0 [ 141.843970][ T8396] ? __pfx_netlink_sendmsg+0x10/0x10 [ 141.843995][ T8396] ? aa_sock_msg_perm+0x91/0x160 [ 141.844022][ T8396] ? __pfx_netlink_sendmsg+0x10/0x10 [ 141.844040][ T8396] __sock_sendmsg+0x221/0x270 [ 141.844064][ T8396] ____sys_sendmsg+0x53a/0x860 [ 141.844090][ T8396] ? __pfx_____sys_sendmsg+0x10/0x10 [ 141.844105][ T8396] ? __fget_files+0x2a/0x410 [ 141.844130][ T8396] ? __fget_files+0x2a/0x410 [ 141.844160][ T8396] __sys_sendmsg+0x269/0x350 [ 141.844181][ T8396] ? __pfx___sys_sendmsg+0x10/0x10 [ 141.844211][ T8396] ? do_sys_openat2+0x17a/0x1d0 [ 141.844259][ T8396] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 141.844283][ T8396] ? do_syscall_64+0x100/0x230 [ 141.844313][ T8396] ? do_syscall_64+0xb6/0x230 [ 141.844334][ T8396] do_syscall_64+0xf3/0x230 [ 141.844351][ T8396] ? clear_bhb_loop+0x35/0x90 [ 141.844374][ T8396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.844394][ T8396] RIP: 0033:0x7fb0adb8d169 [ 141.844409][ T8396] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.844422][ T8396] RSP: 002b:00007fb0ae95b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 141.844440][ T8396] RAX: ffffffffffffffda RBX: 00007fb0adda6080 RCX: 00007fb0adb8d169 [ 141.844452][ T8396] RDX: 0000000000000000 RSI: 0000400000000300 RDI: 0000000000000004 [ 141.844462][ T8396] RBP: 00007fb0ae95b090 R08: 0000000000000000 R09: 0000000000000000 [ 141.844472][ T8396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 141.844481][ T8396] R13: 0000000000000000 R14: 00007fb0adda6080 R15: 00007fff94f4eb48 [ 141.844509][ T8396] [ 142.402252][ T8408] netlink: 28 bytes leftover after parsing attributes in process `syz.0.741'. [ 142.482410][ T8412] netlink: 148 bytes leftover after parsing attributes in process `syz.4.738'. [ 142.499679][ T8412] netlink: 16 bytes leftover after parsing attributes in process `syz.4.738'. [ 142.558364][ T8414] x_tables: ip_tables: osf match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD [ 142.706189][ T8419] netlink: 'syz.2.740': attribute type 1 has an invalid length. [ 143.986741][ T8399] ip6tnl1: entered promiscuous mode [ 143.992414][ T8399] ip6tnl1: entered allmulticast mode [ 144.000354][ T8399] team0: Device ip6tnl1 is up. Set it down before adding it as a team port [ 144.094275][ T8417] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 144.112128][ T8417] syzkaller1: Refused to change device type [ 144.193709][ T8424] __nla_validate_parse: 1 callbacks suppressed [ 144.193727][ T8424] netlink: 32 bytes leftover after parsing attributes in process `syz.3.743'. [ 144.324604][ T8401] lo speed is unknown, defaulting to 1000 [ 144.434378][ T8432] netlink: 'syz.2.746': attribute type 62 has an invalid length. [ 144.530199][ T8401] lo speed is unknown, defaulting to 1000 [ 144.625492][ T8434] netlink: 20 bytes leftover after parsing attributes in process `syz.3.747'. [ 144.963140][ T8448] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 144.993367][ T8450] netlink: 8 bytes leftover after parsing attributes in process `syz.2.756'. [ 145.043112][ T8452] netlink: 28 bytes leftover after parsing attributes in process `syz.3.755'. [ 145.139921][ T8455] netlink: 8 bytes leftover after parsing attributes in process `syz.2.757'. [ 145.415487][ T8461] netlink: 12 bytes leftover after parsing attributes in process `syz.2.760'. [ 145.451412][ T8461] 8021q: adding VLAN 0 to HW filter on device bond5 [ 145.648106][ T8436] lo speed is unknown, defaulting to 1000 [ 145.667086][ T8468] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 145.815197][ T8436] lo speed is unknown, defaulting to 1000 [ 146.022506][ T8483] batadv7: entered allmulticast mode [ 146.107611][ T8488] Cannot find add_set index 0 as target [ 146.301566][ T8495] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 146.334906][ T8495] xt_CT: You must specify a L4 protocol and not use inversions on it [ 146.562434][ T8511] netlink: 'syz.2.775': attribute type 4 has an invalid length. [ 146.616940][ T8511] netlink: 16 bytes leftover after parsing attributes in process `syz.2.775'. [ 146.633268][ T8511] veth1: entered promiscuous mode [ 146.641502][ T8511] veth1: left promiscuous mode [ 146.709599][ T8515] netlink: 24 bytes leftover after parsing attributes in process `syz.4.776'. [ 146.909817][ T8523] netlink: 28 bytes leftover after parsing attributes in process `syz.3.778'. [ 146.954854][ T8526] netlink: 24 bytes leftover after parsing attributes in process `syz.0.777'. [ 147.159493][ T8558] FAULT_INJECTION: forcing a failure. [ 147.159493][ T8558] name failslab, interval 1, probability 0, space 0, times 0 [ 147.281087][ T8558] CPU: 0 UID: 0 PID: 8558 Comm: syz.2.781 Not tainted 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0 [ 147.281114][ T8558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 147.281123][ T8558] Call Trace: [ 147.281129][ T8558] [ 147.281136][ T8558] dump_stack_lvl+0x241/0x360 [ 147.281162][ T8558] ? __pfx_dump_stack_lvl+0x10/0x10 [ 147.281180][ T8558] ? __pfx__printk+0x10/0x10 [ 147.281198][ T8558] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 147.281219][ T8558] ? __pfx___might_resched+0x10/0x10 [ 147.281243][ T8558] should_fail_ex+0x40a/0x550 [ 147.281270][ T8558] should_failslab+0xac/0x100 [ 147.281292][ T8558] kmem_cache_alloc_node_noprof+0x77/0x380 [ 147.281311][ T8558] ? __alloc_skb+0x1c3/0x440 [ 147.281325][ T8558] ? br_get_link_af_size_filtered+0xdb/0xd30 [ 147.281351][ T8558] __alloc_skb+0x1c3/0x440 [ 147.281372][ T8558] ? __pfx___alloc_skb+0x10/0x10 [ 147.281389][ T8558] ? if_nlmsg_size+0x755/0x7b0 [ 147.281407][ T8558] ? if_nlmsg_size+0x540/0x7b0 [ 147.281428][ T8558] rtmsg_ifinfo_build_skb+0x84/0x260 [ 147.281444][ T8558] ? in6_dev_get+0x22a/0x290 [ 147.281462][ T8558] ? notifier_call_chain+0x15a/0x3f0 [ 147.281484][ T8558] rtmsg_ifinfo+0x91/0x1b0 [ 147.281509][ T8558] netdev_state_change+0x139/0x1a0 [ 147.281529][ T8558] ? __pfx_netdev_state_change+0x10/0x10 [ 147.281561][ T8558] do_setlink+0x850/0x40f0 [ 147.281595][ T8558] ? kasan_quarantine_put+0xdc/0x230 [ 147.281612][ T8558] ? lockdep_hardirqs_on+0x99/0x150 [ 147.281635][ T8558] ? __br_vlan_set_default_pvid+0xbe7/0xfb0 [ 147.281659][ T8558] ? __pfx_do_setlink+0x10/0x10 [ 147.281683][ T8558] ? __br_vlan_set_default_pvid+0xbe7/0xfb0 [ 147.281712][ T8558] ? __pfx___br_vlan_set_default_pvid+0x10/0x10 [ 147.281734][ T8558] ? __pfx___mutex_trylock_common+0x10/0x10 [ 147.281763][ T8558] ? br_changelink+0x1352/0x1780 [ 147.281786][ T8558] ? __pfx_br_changelink+0x10/0x10 [ 147.281806][ T8558] ? __pfx_aa_get_newest_label+0x10/0x10 [ 147.281833][ T8558] ? rtnl_newlink+0xc4c/0x1d90 [ 147.281854][ T8558] ? __pfx___mutex_lock+0x10/0x10 [ 147.281880][ T8558] ? ns_capable+0x8a/0xf0 [ 147.281900][ T8558] ? rtnl_link_get_net_capable+0x168/0x340 [ 147.281926][ T8558] rtnl_newlink+0x15a6/0x1d90 [ 147.281946][ T8558] ? stack_depot_save_flags+0x37/0x940 [ 147.281988][ T8558] ? __pfx_rtnl_newlink+0x10/0x10 [ 147.282005][ T8558] ? __netlink_deliver_tap+0x561/0x7f0 [ 147.282025][ T8558] ? __pfx_validate_chain+0x10/0x10 [ 147.282041][ T8558] ? __sock_sendmsg+0x221/0x270 [ 147.282058][ T8558] ? ____sys_sendmsg+0x53a/0x860 [ 147.282071][ T8558] ? __sys_sendmsg+0x269/0x350 [ 147.282084][ T8558] ? do_syscall_64+0xf3/0x230 [ 147.282099][ T8558] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.282138][ T8558] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 147.282162][ T8558] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 147.282192][ T8558] ? mark_lock+0x9a/0x360 [ 147.282210][ T8558] ? __lock_acquire+0x1397/0x2100 [ 147.282262][ T8558] ? __pfx_lock_release+0x10/0x10 [ 147.282296][ T8558] ? __pfx_rtnl_newlink+0x10/0x10 [ 147.282318][ T8558] rtnetlink_rcv_msg+0x791/0xcf0 [ 147.282337][ T8558] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 147.282360][ T8558] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 147.282387][ T8558] ? ref_tracker_free+0x643/0x7e0 [ 147.282409][ T8558] netlink_rcv_skb+0x206/0x480 [ 147.282431][ T8558] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 147.282454][ T8558] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 147.282496][ T8558] ? netlink_deliver_tap+0x2e/0x1b0 [ 147.282518][ T8558] netlink_unicast+0x7f6/0x990 [ 147.282547][ T8558] ? __pfx_netlink_unicast+0x10/0x10 [ 147.282562][ T8558] ? __virt_addr_valid+0x45f/0x530 [ 147.282579][ T8558] ? __phys_addr_symbol+0x2f/0x70 [ 147.282593][ T8558] ? __check_object_size+0x47a/0x730 [ 147.282618][ T8558] netlink_sendmsg+0x8de/0xcb0 [ 147.282646][ T8558] ? __pfx_netlink_sendmsg+0x10/0x10 [ 147.282670][ T8558] ? aa_sock_msg_perm+0x91/0x160 [ 147.282697][ T8558] ? __pfx_netlink_sendmsg+0x10/0x10 [ 147.282716][ T8558] __sock_sendmsg+0x221/0x270 [ 147.282739][ T8558] ____sys_sendmsg+0x53a/0x860 [ 147.282765][ T8558] ? __pfx_____sys_sendmsg+0x10/0x10 [ 147.282780][ T8558] ? __fget_files+0x2a/0x410 [ 147.282803][ T8558] ? __fget_files+0x2a/0x410 [ 147.282834][ T8558] __sys_sendmsg+0x269/0x350 [ 147.282856][ T8558] ? __pfx___sys_sendmsg+0x10/0x10 [ 147.282886][ T8558] ? do_sys_openat2+0x17a/0x1d0 [ 147.282932][ T8558] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 147.282956][ T8558] ? do_syscall_64+0x100/0x230 [ 147.282984][ T8558] ? do_syscall_64+0xb6/0x230 [ 147.283005][ T8558] do_syscall_64+0xf3/0x230 [ 147.283023][ T8558] ? clear_bhb_loop+0x35/0x90 [ 147.283046][ T8558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.283065][ T8558] RIP: 0033:0x7fcda798d169 [ 147.283081][ T8558] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.283095][ T8558] RSP: 002b:00007fcda87c4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 147.283113][ T8558] RAX: ffffffffffffffda RBX: 00007fcda7ba5fa0 RCX: 00007fcda798d169 [ 147.283124][ T8558] RDX: 0000000000000000 RSI: 0000400000000280 RDI: 0000000000000003 [ 147.283135][ T8558] RBP: 00007fcda87c4090 R08: 0000000000000000 R09: 0000000000000000 [ 147.283145][ T8558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 147.283154][ T8558] R13: 0000000000000000 R14: 00007fcda7ba5fa0 R15: 00007ffcbabfef08 [ 147.283180][ T8558] [ 147.943491][ T8561] SET target dimension over the limit! [ 147.997485][ T8569] bond0: mtu less than device minimum [ 148.390981][ T8590] vlan3: entered promiscuous mode [ 148.398043][ T8590] netlink: 'syz.3.792': attribute type 10 has an invalid length. [ 148.411306][ T8597] netlink: 'syz.1.795': attribute type 4 has an invalid length. [ 148.419080][ T8597] netlink: 'syz.1.795': attribute type 2 has an invalid length. [ 148.428171][ T8590] bridge0: port 3(vlan2) entered disabled state [ 148.434611][ T8590] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.442822][ T8590] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.463828][ T8590] bridge0: port 3(vlan2) entered blocking state [ 148.470188][ T8590] bridge0: port 3(vlan2) entered forwarding state [ 148.477276][ T8590] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.484428][ T8590] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.491858][ T8590] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.498989][ T8590] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.552210][ T8590] bridge0: entered promiscuous mode [ 148.561994][ T8590] bridge0: port 3(vlan2) entered disabled state [ 148.568430][ T8590] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.575641][ T8590] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.587426][ T8590] bridge0: left promiscuous mode [ 149.263769][ T8631] IPVS: length: 78 != 8 [ 149.273926][ T8633] __nla_validate_parse: 7 callbacks suppressed [ 149.273940][ T8633] netlink: 96 bytes leftover after parsing attributes in process `syz.1.810'. [ 149.276643][ T8631] netlink: 'syz.4.808': attribute type 1 has an invalid length. [ 149.296969][ T8631] netlink: 224 bytes leftover after parsing attributes in process `syz.4.808'. [ 149.320578][ T8634] batadv2: entered allmulticast mode [ 149.728754][ T8659] netlink: 'syz.1.817': attribute type 4 has an invalid length. [ 149.758693][ T8659] netlink: 'syz.1.817': attribute type 4 has an invalid length. [ 149.791557][ T8100] lo speed is unknown, defaulting to 1000 [ 149.946807][ T8677] netlink: 8 bytes leftover after parsing attributes in process `syz.2.826'. [ 150.013226][ T8673] batadv7: entered allmulticast mode [ 150.083659][ T8683] tipc: Enabling of bearer rejected, failed to enable media [ 150.106705][ T8687] tipc: Enabling of bearer rejected, failed to enable media [ 150.116206][ T7075] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.132001][ T7075] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.373019][ T8703] netlink: 256 bytes leftover after parsing attributes in process `syz.1.833'. [ 150.386700][ T8700] IPv6: sit1: Disabled Multicast RS [ 150.420326][ T8703] netlink: 8 bytes leftover after parsing attributes in process `syz.1.833'. [ 150.426690][ T8706] netlink: 16 bytes leftover after parsing attributes in process `syz.4.831'. [ 150.583293][ T8710] netlink: 76 bytes leftover after parsing attributes in process `syz.4.835'. [ 150.634659][ T8710] netlink: 76 bytes leftover after parsing attributes in process `syz.4.835'. [ 150.651584][ T8715] netlink: 'syz.3.837': attribute type 6 has an invalid length. [ 150.818280][ T8726] netlink: 'syz.3.839': attribute type 3 has an invalid length. [ 150.839300][ T8726] netlink: 'syz.3.839': attribute type 1 has an invalid length. [ 150.915899][ T8733] netlink: 152 bytes leftover after parsing attributes in process `syz.1.840'. [ 150.950920][ T8733] netlink: 'syz.1.840': attribute type 1 has an invalid length. [ 151.108635][ T8736] batadv5: entered allmulticast mode [ 151.380832][ T8748] netlink: 8 bytes leftover after parsing attributes in process `syz.0.847'. [ 151.956016][ T8780] netlink: 'syz.0.857': attribute type 11 has an invalid length. [ 152.095902][ T8782] 8021q: adding VLAN 0 to HW filter on device bond4 [ 152.113416][ T8782] bond3: (slave bond4): making interface the new active one [ 152.151222][ T8782] bond3: (slave bond4): Enslaving as an active interface with an up link [ 152.224272][ T8793] batadv2: entered allmulticast mode [ 152.368928][ T8799] bond0: left allmulticast mode [ 152.396337][ T8799] bridge0: port 1(vlan2) entered disabled state [ 153.211023][ T8817] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 153.644537][ T8834] validate_nla: 4 callbacks suppressed [ 153.644553][ T8834] netlink: 'syz.4.877': attribute type 11 has an invalid length. [ 153.939306][ T29] audit: type=1800 audit(1741472400.146:2): pid=8854 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.882" name="memory.events" dev="tmpfs" ino=1000 res=0 errno=0 [ 154.025089][ T29] audit: type=1804 audit(1741472400.236:3): pid=8855 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.882" name="/newroot/192/memory.events" dev="tmpfs" ino=1000 res=1 errno=0 [ 155.017143][ T8872] netlink: 'syz.4.889': attribute type 1 has an invalid length. [ 155.057623][ T8872] 8021q: adding VLAN 0 to HW filter on device bond12 [ 155.118145][ T8875] netlink: 'syz.2.890': attribute type 1 has an invalid length. [ 155.154808][ T8875] 8021q: adding VLAN 0 to HW filter on device bond6 [ 155.403287][ T8882] __nla_validate_parse: 10 callbacks suppressed [ 155.403306][ T8882] netlink: 4 bytes leftover after parsing attributes in process `syz.0.894'. [ 155.452031][ T8882] vlan2: left promiscuous mode [ 155.492391][ T8882] bridge0: port 1(vlan2) entered disabled state [ 155.550142][ T8889] netlink: 28 bytes leftover after parsing attributes in process `syz.2.896'. [ 155.999603][ T8908] openvswitch: netlink: IP tunnel dst address not specified [ 156.009979][ T8908] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 156.260518][ T8916] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 156.429787][ T8920] netlink: 'syz.4.908': attribute type 1 has an invalid length. [ 156.507982][ T8920] 8021q: adding VLAN 0 to HW filter on device bond13 [ 157.052298][ T8951] netlink: 8 bytes leftover after parsing attributes in process `syz.2.919'. [ 157.244406][ T8963] netlink: 8 bytes leftover after parsing attributes in process `syz.0.920'. [ 157.278692][ T8961] batadv5: entered allmulticast mode [ 157.323379][ T8958] netlink: 'syz.3.921': attribute type 10 has an invalid length. [ 157.328885][ T8963] vlan3: entered allmulticast mode [ 157.341904][ T8963] hsr0: entered allmulticast mode [ 157.349593][ T8963] hsr_slave_0: entered allmulticast mode [ 157.354125][ T8957] netlink: 'syz.4.918': attribute type 10 has an invalid length. [ 157.364935][ T8963] hsr_slave_1: entered allmulticast mode [ 157.397911][ T8966] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 157.408596][ T8957] bond0: (slave team0): refused to change device type [ 157.418263][ T8967] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 157.933088][ T8976] netlink: 'syz.2.925': attribute type 1 has an invalid length. [ 158.073005][ T8976] 8021q: adding VLAN 0 to HW filter on device bond7 [ 158.601549][ T8997] syzkaller1: entered promiscuous mode [ 158.621079][ T8997] syzkaller1: entered allmulticast mode [ 158.896909][ T8996] lo speed is unknown, defaulting to 1000 [ 159.206888][ T8996] lo speed is unknown, defaulting to 1000 [ 159.488950][ T9009] netlink: 'syz.1.935': attribute type 1 has an invalid length. [ 159.531879][ T9009] netlink: 'syz.1.935': attribute type 2 has an invalid length. [ 159.574388][ T9009] netlink: 16 bytes leftover after parsing attributes in process `syz.1.935'. [ 159.696976][ T9009] bridge0: entered promiscuous mode [ 159.746029][ T9009] bridge0: left promiscuous mode [ 160.021536][ T9020] netlink: 'syz.2.939': attribute type 1 has an invalid length. [ 160.030449][ T9024] sctp: [Deprecated]: syz.0.940 (pid 9024) Use of struct sctp_assoc_value in delayed_ack socket option. [ 160.030449][ T9024] Use struct sctp_sack_info instead [ 160.071919][ T9020] netlink: 104 bytes leftover after parsing attributes in process `syz.2.939'. [ 160.107907][ T9025] sctp: [Deprecated]: syz.1.941 (pid 9025) Use of int in max_burst socket option deprecated. [ 160.107907][ T9025] Use struct sctp_assoc_value instead [ 160.689904][ T9039] vlan4: entered allmulticast mode [ 161.100912][ T9039] lo speed is unknown, defaulting to 1000 [ 161.281534][ T9056] netlink: 8 bytes leftover after parsing attributes in process `syz.2.951'. [ 161.518218][ T9039] lo speed is unknown, defaulting to 1000 [ 161.613556][ T9077] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.624348][ T9077] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 161.775152][ T9077] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.842220][ T9077] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 162.029161][ T9077] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.042212][ T5842] Bluetooth: hci4: command 0x0405 tx timeout [ 162.071862][ T9077] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 162.256539][ T9077] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.295901][ T9077] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 162.404147][ T9086] netlink: 228 bytes leftover after parsing attributes in process `syz.2.957'. [ 162.415272][ T9086] netlink: 'syz.2.957': attribute type 30 has an invalid length. [ 162.622721][ T9090] netlink: 28 bytes leftover after parsing attributes in process `syz.4.958'. [ 162.683271][ T9077] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 162.702223][ T9077] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 162.756428][ T9077] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 162.779270][ T9077] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 162.791067][ T9091] netlink: 'syz.0.954': attribute type 30 has an invalid length. [ 162.851061][ T9077] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 162.917003][ T9077] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 162.957655][ T9091] netlink: 20 bytes leftover after parsing attributes in process `syz.0.954'. [ 162.990152][ T9077] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 163.028828][ T9077] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 163.198416][ T9100] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 163.333665][ T9106] netlink: 'syz.2.963': attribute type 3 has an invalid length. [ 163.352266][ T9106] netlink: 'syz.2.963': attribute type 1 has an invalid length. [ 163.432778][ T9112] netlink: 64134 bytes leftover after parsing attributes in process `syz.3.965'. [ 163.454789][ T9114] netlink: 244 bytes leftover after parsing attributes in process `syz.1.966'. [ 163.594452][ T9120] ipt_ECN: cannot use operation on non-tcp rule [ 163.657605][ T9117] batadv0: entered allmulticast mode [ 163.787097][ T9131] netlink: 8 bytes leftover after parsing attributes in process `syz.4.973'. [ 163.976269][ T9145] netlink: 28 bytes leftover after parsing attributes in process `syz.2.979'. [ 164.010781][ T9146] openvswitch: netlink: Flow actions attr not present in new flow. [ 164.088600][ T9152] netlink: 'syz.1.980': attribute type 3 has an invalid length. [ 164.117365][ T9152] netlink: 'syz.1.980': attribute type 1 has an invalid length. [ 164.134178][ T9154] netlink: 'syz.3.981': attribute type 1 has an invalid length. [ 164.174070][ T9160] xt_TPROXY: Can be used only with -p tcp or -p udp [ 164.197330][ T9154] 8021q: adding VLAN 0 to HW filter on device bond11 [ 164.471390][ T9176] netlink: 8 bytes leftover after parsing attributes in process `syz.4.988'. [ 164.603052][ T29] audit: type=1107 audit(1741472410.806:4): pid=9182 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='„s¥¦¥yhÑw>Æ=Ëï© ½pY›6û†¸'mæðqÑá§uDŠ®~ [ 164.603052][ T29] 84x³à^½¼„®¥ †­¦`ð…>—_' [ 164.629948][ T9183] x_tables: duplicate underflow at hook 3 [ 164.637500][ T9181] batadv3: entered allmulticast mode [ 164.812683][ T9193] netlink: 'syz.4.994': attribute type 1 has an invalid length. [ 164.868042][ T9193] 8021q: adding VLAN 0 to HW filter on device bond14 [ 164.905447][ T9204] netlink: 'syz.1.995': attribute type 3 has an invalid length. [ 164.947949][ T9204] netlink: 'syz.1.995': attribute type 1 has an invalid length. [ 165.282155][ T9225] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1001'. [ 165.549530][ T9241] batadv3: entered allmulticast mode [ 165.812147][ T9259] netlink: 'syz.1.1013': attribute type 1 has an invalid length. [ 166.004304][ T9259] 8021q: adding VLAN 0 to HW filter on device bond7 [ 166.219440][ T9269] netlink: 'syz.3.1015': attribute type 3 has an invalid length. [ 166.270209][ T9267] netlink: 'syz.3.1015': attribute type 1 has an invalid length. [ 166.333914][ T9275] netlink: 'syz.1.1016': attribute type 3 has an invalid length. [ 166.349382][ T9275] netlink: 'syz.1.1016': attribute type 1 has an invalid length. [ 166.502659][ T9283] __nla_validate_parse: 1 callbacks suppressed [ 166.502678][ T9283] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1017'. [ 166.518609][ T9269] 8021q: adding VLAN 0 to HW filter on device bond13 [ 166.577789][ T9269] bond12: (slave bond13): making interface the new active one [ 166.629270][ T9269] bond12: (slave bond13): Enslaving as an active interface with an up link [ 166.994670][ T9292] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1020'. [ 167.293476][ T9303] batadv7: entered allmulticast mode [ 167.589745][ T9313] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1029'. [ 167.613603][ T9310] syzkaller1: entered promiscuous mode [ 167.619110][ T9310] syzkaller1: entered allmulticast mode [ 167.802094][ T9325] ipt_rpfilter: unknown options [ 167.908952][ T9327] netlink: 'syz.0.1031': attribute type 3 has an invalid length. [ 167.917474][ T9327] netlink: 'syz.0.1031': attribute type 1 has an invalid length. [ 167.945242][ T9329] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1035'. [ 168.063910][ T9329] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1035'. [ 168.286035][ T9341] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1037'. [ 168.296500][ T9343] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1039'. [ 168.567127][ T9343] batadv7: entered allmulticast mode [ 168.930873][ T9355] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1042'. [ 169.013684][ T9351] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.120988][ T9351] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.200893][ T9351] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.267981][ T9351] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.374077][ T9351] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.414092][ T9351] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.429150][ T9351] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.445580][ T9351] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.466411][ T9352] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.597353][ T9372] 8021q: adding VLAN 0 to HW filter on device bond15 [ 169.683703][ T9352] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.803975][ T9352] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.883747][ T9352] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.022085][ T9382] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1052'. [ 170.072890][ T9382] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1052'. [ 170.272605][ T9386] validate_nla: 3 callbacks suppressed [ 170.272623][ T9386] netlink: 'syz.1.1053': attribute type 29 has an invalid length. [ 170.415225][ T9391] netlink: 'syz.4.1054': attribute type 10 has an invalid length. [ 170.483662][ T9397] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 170.619020][ T9391] bond0: (slave team0): refused to change device type [ 171.772625][ T9412] syzkaller1: left promiscuous mode [ 171.781957][ T9412] syzkaller1: left allmulticast mode [ 172.118077][ T9417] __nla_validate_parse: 3 callbacks suppressed [ 172.118097][ T9417] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1061'. [ 172.316140][ T9421] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1062'. [ 172.357466][ T9421] batadv3: entered allmulticast mode [ 172.872646][ T9352] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.907097][ T9352] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.948937][ T9352] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.003424][ T9352] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.013915][ T9428] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1065'. [ 173.042157][ T9431] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1065'. [ 173.243091][ T9433] netlink: 'syz.2.1066': attribute type 2 has an invalid length. [ 173.269374][ T9433] fþ²¹¥‰: entered promiscuous mode [ 173.362071][ T9435] x_tables: duplicate underflow at hook 2 [ 173.463863][ T9438] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1068'. [ 173.496582][ T9438] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1068'. [ 173.886972][ T9454] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1072'. [ 173.923451][ T9454] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1072'. [ 173.992771][ T9454] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1072'. [ 174.001699][ T9454] vlan2: left promiscuous mode [ 174.029301][ T9454] bridge0: port 3(vlan2) entered disabled state [ 174.064014][ T9454] bridge_slave_1: left allmulticast mode [ 174.092254][ T9454] bridge_slave_1: left promiscuous mode [ 174.098031][ T9454] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.152773][ T9454] bridge_slave_0: left allmulticast mode [ 174.158439][ T9454] bridge_slave_0: left promiscuous mode [ 174.173208][ T9454] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.214174][ T9463] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1074'. [ 174.437229][ T9458] syzkaller0: entered promiscuous mode [ 174.452029][ T9458] syzkaller0: entered allmulticast mode [ 175.782962][ T9475] netlink: 'syz.4.1077': attribute type 2 has an invalid length. [ 177.437424][ T9492] netlink: 'syz.3.1082': attribute type 1 has an invalid length. [ 177.576259][ T9492] 8021q: adding VLAN 0 to HW filter on device bond14 [ 177.609358][ T9501] netlink: 'syz.0.1084': attribute type 3 has an invalid length. [ 177.683302][ T9500] batadv7: entered allmulticast mode [ 177.733452][ T9498] netlink: 'syz.0.1084': attribute type 1 has an invalid length. [ 177.903294][ T9501] 8021q: adding VLAN 0 to HW filter on device bond5 [ 177.911480][ T9501] bond4: (slave bond5): making interface the new active one [ 177.912630][ T9515] netlink: 'syz.3.1088': attribute type 3 has an invalid length. [ 177.921004][ T9501] bond4: (slave bond5): Enslaving as an active interface with an up link [ 177.963213][ T9515] netlink: 'syz.3.1088': attribute type 1 has an invalid length. [ 178.230127][ T9530] syzkaller1: entered promiscuous mode [ 178.236696][ T9530] syzkaller1: entered allmulticast mode [ 179.109204][ T9530] bond0: left allmulticast mode [ 180.240143][ T9530] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.261879][ T9530] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.270775][ T9530] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.312070][ T9530] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.616024][ T9530] veth0_to_batadv: left allmulticast mode [ 180.955167][ T9516] lo speed is unknown, defaulting to 1000 [ 181.164239][ T5853] Bluetooth: hci1: command 0x0406 tx timeout [ 181.164272][ T5150] Bluetooth: hci3: command 0x0406 tx timeout [ 181.176375][ T5840] Bluetooth: hci2: command 0x0406 tx timeout [ 181.276999][ T9516] lo speed is unknown, defaulting to 1000 [ 181.575464][ T9543] __nla_validate_parse: 2 callbacks suppressed [ 181.575483][ T9543] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1096'. [ 181.725142][ T9547] syzkaller1: entered promiscuous mode [ 181.751886][ T9547] syzkaller1: entered allmulticast mode [ 182.187710][ T9545] lo speed is unknown, defaulting to 1000 [ 182.440517][ T9554] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1099'. [ 182.671410][ T9545] lo speed is unknown, defaulting to 1000 [ 182.752815][ T9560] netlink: 'syz.2.1101': attribute type 3 has an invalid length. [ 183.144288][ T9573] netlink: 'syz.1.1105': attribute type 1 has an invalid length. [ 183.219340][ T9573] 8021q: adding VLAN 0 to HW filter on device bond9 [ 184.234235][ T9592] netlink: 'syz.4.1111': attribute type 1 has an invalid length. [ 184.327223][ T9592] 8021q: adding VLAN 0 to HW filter on device bond16 [ 185.221957][ T29] audit: type=1800 audit(1741472431.426:5): pid=9612 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1117" name="memory.events" dev="tmpfs" ino=1246 res=0 errno=0 [ 186.205868][ T9628] netlink: 'syz.4.1124': attribute type 1 has an invalid length. [ 186.226223][ T9628] 8021q: adding VLAN 0 to HW filter on device bond17 [ 186.745806][ T9654] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1133'. [ 186.792966][ T9658] netlink: 'syz.3.1136': attribute type 1 has an invalid length. [ 186.833365][ T9658] 8021q: adding VLAN 0 to HW filter on device bond16 [ 186.919450][ T9663] netlink: 'syz.2.1135': attribute type 3 has an invalid length. [ 186.945323][ T9663] netlink: 'syz.2.1135': attribute type 1 has an invalid length. [ 187.101031][ T9675] netlink: 'syz.0.1139': attribute type 1 has an invalid length. [ 187.120378][ T9675] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1139'. [ 187.152499][ T9666] 8021q: adding VLAN 0 to HW filter on device bond11 [ 187.168468][ T9677] netlink: 'syz.3.1141': attribute type 16 has an invalid length. [ 187.172641][ T9666] bond10: (slave bond11): making interface the new active one [ 187.183785][ T9677] netlink: 'syz.3.1141': attribute type 17 has an invalid length. [ 187.223332][ T9666] bond10: (slave bond11): Enslaving as an active interface with an up link [ 187.282175][ T9677] bridge0: port 3(vlan2) entered blocking state [ 187.288585][ T9677] bridge0: port 3(vlan2) entered forwarding state [ 187.295346][ T9677] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.302510][ T9677] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.309884][ T9677] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.317063][ T9677] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.329811][ T9677] bridge0: entered promiscuous mode [ 187.339619][ T9677] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.372101][ T9677] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 187.633817][ T9693] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1147'. [ 187.650272][ T9696] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1145'. [ 187.802028][ T9699] batadv2: entered allmulticast mode [ 188.152206][ T9716] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1157'. [ 188.319718][ T9724] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1159'. [ 188.444352][ T9729] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.461939][ T9729] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.489928][ T9729] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.560753][ T9729] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.568551][ T9734] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 188.591999][ T9729] geneve2: entered promiscuous mode [ 188.597345][ T9729] geneve2: entered allmulticast mode [ 188.614336][ T9729] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.641853][ T9729] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.679779][ T9729] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.734556][ T9729] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.256216][ T9743] sctp: [Deprecated]: syz.3.1165 (pid 9743) Use of int in max_burst socket option deprecated. [ 189.256216][ T9743] Use struct sctp_assoc_value instead [ 189.941204][ T9764] 8021q: VLANs not supported on team0 [ 190.004052][ T9766] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1172'. [ 190.180840][ T9768] batadv0: entered allmulticast mode [ 190.978989][ T9789] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1183'. [ 191.210873][ T9791] sctp: [Deprecated]: syz.4.1184 (pid 9791) Use of int in max_burst socket option deprecated. [ 191.210873][ T9791] Use struct sctp_assoc_value instead [ 191.634832][ T9793] lo speed is unknown, defaulting to 1000 [ 191.976981][ T9793] lo speed is unknown, defaulting to 1000 [ 192.196152][ T9801] batadv0: entered allmulticast mode [ 193.159484][ T9819] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1195'. [ 193.333866][ T9825] sctp: [Deprecated]: syz.0.1198 (pid 9825) Use of int in max_burst socket option deprecated. [ 193.333866][ T9825] Use struct sctp_assoc_value instead [ 193.384177][ T9831] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1200'. [ 193.412388][ T9828] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1199'. [ 193.421413][ T9828] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1199'. [ 193.462529][ T9828] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1199'. [ 193.492818][ T9828] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1199'. [ 193.501733][ T9828] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1199'. [ 193.527272][ T9828] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1199'. [ 193.582087][ T9828] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1199'. [ 193.591170][ T9828] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1199'. [ 193.648605][ T9828] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 193.694569][ T9830] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 193.712490][ T9830] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 193.730307][ T9830] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 194.057450][ T9856] 8021q: adding VLAN 0 to HW filter on device bond10 [ 194.115519][ T9856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.149073][ T9856] bond10: (slave batadv0): Enslaving as an active interface with an up link [ 194.502921][ T9875] netlink: 'syz.4.1213': attribute type 1 has an invalid length. [ 194.573715][ T9875] 8021q: adding VLAN 0 to HW filter on device bond18 [ 195.682808][ T9919] netlink: 'syz.3.1226': attribute type 3 has an invalid length. [ 195.738305][ T9919] netlink: 'syz.3.1226': attribute type 1 has an invalid length. [ 195.839671][ T9924] netlink: 'syz.4.1228': attribute type 1 has an invalid length. [ 195.888880][ T9926] 8021q: adding VLAN 0 to HW filter on device bond18 [ 195.983873][ T9926] bond17: (slave bond18): making interface the new active one [ 196.036212][ T9926] bond17: (slave bond18): Enslaving as an active interface with an up link [ 196.150998][ T9924] 8021q: adding VLAN 0 to HW filter on device bond19 [ 197.140258][ T9978] netlink: 'syz.2.1246': attribute type 1 has an invalid length. [ 197.196860][ T9978] 8021q: adding VLAN 0 to HW filter on device bond12 [ 197.259397][ T9978] bond12: (slave gretap1): making interface the new active one [ 197.292935][ T9978] bond12: (slave gretap1): Enslaving as an active interface with an up link [ 197.308852][ T9983] pim6reg1: entered promiscuous mode [ 197.325263][ T9983] pim6reg1: entered allmulticast mode [ 198.114748][T10016] netlink: 'syz.0.1259': attribute type 1 has an invalid length. [ 198.170879][T10016] 8021q: adding VLAN 0 to HW filter on device bond6 [ 198.287153][T10016] bond6: (slave gretap1): making interface the new active one [ 198.323690][T10016] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 198.466635][T10025] __nla_validate_parse: 18 callbacks suppressed [ 198.466654][T10025] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1261'. [ 198.496193][T10033] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1263'. [ 198.536473][T10037] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1265'. [ 198.752436][T10022] lo speed is unknown, defaulting to 1000 [ 198.931029][T10048] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1267'. [ 198.950640][T10046] wireguard0: entered promiscuous mode [ 198.971954][T10046] wireguard0: entered allmulticast mode [ 199.112032][T10022] lo speed is unknown, defaulting to 1000 [ 199.345235][T10034] lo speed is unknown, defaulting to 1000 [ 199.465489][T10051] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1268'. [ 200.022964][T10034] lo speed is unknown, defaulting to 1000 [ 200.853683][T10078] netlink: 'syz.1.1275': attribute type 1 has an invalid length. [ 200.929338][T10078] 8021q: adding VLAN 0 to HW filter on device bond11 [ 201.431254][T10082] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1276'. [ 201.569009][T10089] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1279'. [ 201.606769][T10089] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 202.586830][T10115] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1288'. [ 202.696960][T10117] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1289'. [ 203.909295][T10133] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1294'. [ 204.005443][T10042] Set syz1 is full, maxelem 65536 reached [ 204.272628][T10150] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1300'. [ 204.305022][T10141] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1297'. [ 204.578541][T10164] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1304'. [ 204.773498][T10175] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1310'. [ 204.796263][T10175] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1310'. [ 204.817050][T10175] netlink: 'syz.4.1310': attribute type 13 has an invalid length. [ 204.859819][T10184] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1311'. [ 204.912734][T10186] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1313'. [ 204.979461][T10191] bond0: option xmit_hash_policy: invalid value (71) [ 205.011380][T10195] macsec0: entered allmulticast mode [ 205.067224][T10195] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1316'. [ 205.181621][T10195] xfrm1: entered promiscuous mode [ 205.196241][T10195] xfrm1: entered allmulticast mode [ 205.693606][T10220] netlink: 'syz.3.1320': attribute type 3 has an invalid length. [ 205.702402][T10220] netlink: 'syz.3.1320': attribute type 1 has an invalid length. [ 206.006251][T10233] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1327'. [ 206.710971][T10268] netlink: 'syz.2.1340': attribute type 3 has an invalid length. [ 206.721487][T10268] netlink: 'syz.2.1340': attribute type 1 has an invalid length. [ 206.760974][T10275] netlink: 'syz.0.1341': attribute type 10 has an invalid length. [ 206.779528][T10275] veth0_vlan: left promiscuous mode [ 206.788444][T10275] veth0_vlan: entered promiscuous mode [ 206.798710][T10275] team0: Device veth0_vlan failed to register rx_handler [ 207.106643][T10288] netlink: 'syz.3.1343': attribute type 1 has an invalid length. [ 207.255930][T10275] lo speed is unknown, defaulting to 1000 [ 207.366110][T10294] batadv0: entered allmulticast mode [ 207.661241][T10275] lo speed is unknown, defaulting to 1000 [ 207.791186][T10278] lo speed is unknown, defaulting to 1000 [ 207.798841][ T8102] hid-generic 0005:07C0:06E6.0001: item fetching failed at offset 0/1 [ 207.821704][ T8102] hid-generic 0005:07C0:06E6.0001: probe with driver hid-generic failed with error -22 [ 207.948641][T10278] lo speed is unknown, defaulting to 1000 [ 207.952437][T10312] netlink: 'syz.4.1352': attribute type 3 has an invalid length. [ 207.984769][T10312] netlink: 'syz.4.1352': attribute type 1 has an invalid length. [ 208.877549][T10337] netlink: 'syz.0.1362': attribute type 1 has an invalid length. [ 208.959818][T10337] 8021q: adding VLAN 0 to HW filter on device bond7 [ 209.073493][T10346] __nla_validate_parse: 12 callbacks suppressed [ 209.073512][T10346] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1363'. [ 209.113483][T10349] netlink: 'syz.4.1365': attribute type 3 has an invalid length. [ 209.122049][T10349] netlink: 'syz.4.1365': attribute type 1 has an invalid length. [ 209.333940][T10358] netlink: 'syz.0.1369': attribute type 1 has an invalid length. [ 209.373706][T10359] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1368'. [ 209.507645][T10370] [ 209.510016][T10370] ====================================================== [ 209.517029][T10370] WARNING: possible circular locking dependency detected [ 209.524037][T10370] 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0 Not tainted [ 209.531125][T10370] ------------------------------------------------------ [ 209.538129][T10370] syz.4.1370/10370 is trying to acquire lock: [ 209.544179][T10370] ffff8880329ccd28 (&dev_instance_lock_key#2){+.+.}-{4:4}, at: __dev_open+0x5cb/0x8a0 [ 209.555063][T10370] [ 209.555063][T10370] but task is already holding lock: [ 209.562414][T10370] ffff888061918e00 (team->team_lock_key#5){+.+.}-{4:4}, at: team_add_slave+0xb3/0x28a0 [ 209.572074][T10370] [ 209.572074][T10370] which lock already depends on the new lock. [ 209.572074][T10370] [ 209.582461][T10370] [ 209.582461][T10370] the existing dependency chain (in reverse order) is: [ 209.591464][T10370] [ 209.591464][T10370] -> #2 (team->team_lock_key#5){+.+.}-{4:4}: [ 209.599631][T10370] lock_acquire+0x1ed/0x550 [ 209.604650][T10370] __mutex_lock+0x19c/0x1010 [ 209.609836][T10370] team_set_mac_address+0x122/0x280 [ 209.615543][T10370] netif_set_mac_address+0x327/0x510 [ 209.621335][T10370] do_setlink+0xaa6/0x40f0 [ 209.626267][T10370] rtnl_newlink+0x15a6/0x1d90 [ 209.631451][T10370] rtnetlink_rcv_msg+0x791/0xcf0 [ 209.636898][T10370] netlink_rcv_skb+0x206/0x480 [ 209.642171][T10370] netlink_unicast+0x7f6/0x990 [ 209.647442][T10370] netlink_sendmsg+0x8de/0xcb0 [ 209.652714][T10370] __sock_sendmsg+0x221/0x270 [ 209.657899][T10370] __sys_sendto+0x363/0x4c0 [ 209.662911][T10370] __x64_sys_sendto+0xde/0x100 [ 209.668178][T10370] do_syscall_64+0xf3/0x230 [ 209.673190][T10370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.679606][T10370] [ 209.679606][T10370] -> #1 (&dev_instance_lock_key#12){+.+.}-{4:4}: [ 209.688116][T10370] lock_acquire+0x1ed/0x550 [ 209.693133][T10370] __mutex_lock+0x19c/0x1010 [ 209.698230][T10370] dev_set_mac_address+0x2a/0x50 [ 209.703670][T10370] bond_set_mac_address+0x28e/0x830 [ 209.709371][T10370] netif_set_mac_address+0x327/0x510 [ 209.715164][T10370] do_setlink+0xaa6/0x40f0 [ 209.720091][T10370] rtnl_newlink+0x15a6/0x1d90 [ 209.725274][T10370] rtnetlink_rcv_msg+0x791/0xcf0 [ 209.730720][T10370] netlink_rcv_skb+0x206/0x480 [ 209.735995][T10370] netlink_unicast+0x7f6/0x990 [ 209.741354][T10370] netlink_sendmsg+0x8de/0xcb0 [ 209.746624][T10370] __sock_sendmsg+0x221/0x270 [ 209.751815][T10370] ____sys_sendmsg+0x53a/0x860 [ 209.757085][T10370] __sys_sendmsg+0x269/0x350 [ 209.762180][T10370] do_syscall_64+0xf3/0x230 [ 209.767193][T10370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.773596][T10370] [ 209.773596][T10370] -> #0 (&dev_instance_lock_key#2){+.+.}-{4:4}: [ 209.782047][T10370] validate_chain+0x18ef/0x5920 [ 209.787404][T10370] __lock_acquire+0x1397/0x2100 [ 209.792763][T10370] lock_acquire+0x1ed/0x550 [ 209.797774][T10370] __mutex_lock+0x19c/0x1010 [ 209.802873][T10370] __dev_open+0x5cb/0x8a0 [ 209.807714][T10370] netif_open+0xae/0x1b0 [ 209.812465][T10370] dev_open+0x13e/0x260 [ 209.817129][T10370] team_add_slave+0xabe/0x28a0 [ 209.822400][T10370] do_set_master+0x579/0x730 [ 209.827499][T10370] rtnl_newlink_create+0x6e6/0xbd0 [ 209.833119][T10370] rtnl_newlink+0x167a/0x1d90 [ 209.838301][T10370] rtnetlink_rcv_msg+0x791/0xcf0 [ 209.843750][T10370] netlink_rcv_skb+0x206/0x480 [ 209.849022][T10370] netlink_unicast+0x7f6/0x990 [ 209.854290][T10370] netlink_sendmsg+0x8de/0xcb0 [ 209.859564][T10370] __sock_sendmsg+0x221/0x270 [ 209.864747][T10370] ____sys_sendmsg+0x53a/0x860 [ 209.870015][T10370] __sys_sendmsg+0x269/0x350 [ 209.875107][T10370] do_syscall_64+0xf3/0x230 [ 209.880113][T10370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.886515][T10370] [ 209.886515][T10370] other info that might help us debug this: [ 209.886515][T10370] [ 209.896726][T10370] Chain exists of: [ 209.896726][T10370] &dev_instance_lock_key#2 --> &dev_instance_lock_key#12 --> team->team_lock_key#5 [ 209.896726][T10370] [ 209.911940][T10370] Possible unsafe locking scenario: [ 209.911940][T10370] [ 209.919371][T10370] CPU0 CPU1 [ 209.924716][T10370] ---- ---- [ 209.930061][T10370] lock(team->team_lock_key#5); [ 209.934990][T10370] lock(&dev_instance_lock_key#12); [ 209.942788][T10370] lock(team->team_lock_key#5); [ 209.950232][T10370] lock(&dev_instance_lock_key#2); [ 209.955420][T10370] [ 209.955420][T10370] *** DEADLOCK *** [ 209.955420][T10370] [ 209.963545][T10370] 3 locks held by syz.4.1370/10370: [ 209.968725][T10370] #0: ffffffff903d44a0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x22/0x250 [ 209.978210][T10370] #1: ffffffff8fed6908 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc4c/0x1d90 [ 209.987251][T10370] #2: ffff888061918e00 (team->team_lock_key#5){+.+.}-{4:4}, at: team_add_slave+0xb3/0x28a0 [ 209.997360][T10370] [ 209.997360][T10370] stack backtrace: [ 210.003230][T10370] CPU: 1 UID: 0 PID: 10370 Comm: syz.4.1370 Not tainted 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0 [ 210.003247][T10370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 210.003255][T10370] Call Trace: [ 210.003261][T10370] [ 210.003267][T10370] dump_stack_lvl+0x241/0x360 [ 210.003284][T10370] ? __pfx_dump_stack_lvl+0x10/0x10 [ 210.003298][T10370] ? __pfx__printk+0x10/0x10 [ 210.003319][T10370] print_circular_bug+0x13a/0x1b0 [ 210.003335][T10370] check_noncircular+0x36a/0x4a0 [ 210.003351][T10370] ? __pfx_check_noncircular+0x10/0x10 [ 210.003364][T10370] ? queued_spin_lock_slowpath+0x42/0x50 [ 210.003376][T10370] ? lockdep_lock+0x1b0/0x2b0 [ 210.003396][T10370] validate_chain+0x18ef/0x5920 [ 210.003416][T10370] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 210.003431][T10370] ? __pfx_validate_chain+0x10/0x10 [ 210.003446][T10370] ? stack_depot_save_flags+0x7b4/0x940 [ 210.003467][T10370] ? kasan_save_track+0x51/0x80 [ 210.003481][T10370] ? kasan_save_track+0x3f/0x80 [ 210.003493][T10370] ? __kasan_kmalloc+0x98/0xb0 [ 210.003506][T10370] ? __kmalloc_noprof+0x285/0x4c0 [ 210.003521][T10370] ? bond_update_slave_arr+0x150/0xd50 [ 210.003534][T10370] ? bond_open+0xe36/0xfa0 [ 210.003546][T10370] ? __dev_open+0x45a/0x8a0 [ 210.003563][T10370] ? netif_open+0xae/0x1b0 [ 210.003578][T10370] ? dev_open+0x13e/0x260 [ 210.003594][T10370] ? team_add_slave+0xabe/0x28a0 [ 210.003608][T10370] ? do_set_master+0x579/0x730 [ 210.003624][T10370] ? rtnl_newlink_create+0x6e6/0xbd0 [ 210.003641][T10370] ? rtnl_newlink+0x167a/0x1d90 [ 210.003655][T10370] ? rtnetlink_rcv_msg+0x791/0xcf0 [ 210.003670][T10370] ? netlink_rcv_skb+0x206/0x480 [ 210.003685][T10370] ? netlink_unicast+0x7f6/0x990 [ 210.003699][T10370] ? netlink_sendmsg+0x8de/0xcb0 [ 210.003714][T10370] ? ____sys_sendmsg+0x53a/0x860 [ 210.003727][T10370] ? __sys_sendmsg+0x269/0x350 [ 210.003739][T10370] ? mark_lock+0x9a/0x360 [ 210.003752][T10370] __lock_acquire+0x1397/0x2100 [ 210.003774][T10370] lock_acquire+0x1ed/0x550 [ 210.003791][T10370] ? __dev_open+0x5cb/0x8a0 [ 210.003808][T10370] ? __pfx_lock_acquire+0x10/0x10 [ 210.003825][T10370] ? lockdep_rtnl_is_held+0x26/0x40 [ 210.003838][T10370] ? __pfx___might_resched+0x10/0x10 [ 210.003854][T10370] ? bond_update_slave_arr+0x844/0xd50 [ 210.003870][T10370] __mutex_lock+0x19c/0x1010 [ 210.003884][T10370] ? __dev_open+0x5cb/0x8a0 [ 210.003900][T10370] ? bond_alb_initialize+0x4c3/0x5f0 [ 210.003919][T10370] ? __dev_open+0x5cb/0x8a0 [ 210.003934][T10370] ? __pfx___mutex_lock+0x10/0x10 [ 210.003954][T10370] __dev_open+0x5cb/0x8a0 [ 210.003971][T10370] ? __pfx___dev_open+0x10/0x10 [ 210.003988][T10370] ? ref_tracker_alloc+0x332/0x490 [ 210.004006][T10370] netif_open+0xae/0x1b0 [ 210.004021][T10370] ? __pfx_netif_open+0x10/0x10 [ 210.004040][T10370] dev_open+0x13e/0x260 [ 210.004058][T10370] team_add_slave+0xabe/0x28a0 [ 210.004079][T10370] ? __pfx_team_add_slave+0x10/0x10 [ 210.004093][T10370] ? nlmsg_notify+0x14c/0x1c0 [ 210.004109][T10370] ? __dev_notify_flags+0x316/0x400 [ 210.004120][T10370] ? dev_set_rx_mode+0xb8/0x2e0 [ 210.004139][T10370] ? __pfx___dev_notify_flags+0x10/0x10 [ 210.004156][T10370] ? __dev_change_flags+0x515/0x6f0 [ 210.004169][T10370] ? mutex_is_locked+0x17/0x50 [ 210.004182][T10370] do_set_master+0x579/0x730 [ 210.004201][T10370] rtnl_newlink_create+0x6e6/0xbd0 [ 210.004223][T10370] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 210.004242][T10370] ? __pfx___mutex_lock+0x10/0x10 [ 210.004258][T10370] ? ns_capable+0x8a/0xf0 [ 210.004274][T10370] rtnl_newlink+0x167a/0x1d90 [ 210.004296][T10370] ? __pfx_rtnl_newlink+0x10/0x10 [ 210.004317][T10370] ? __pfx_validate_chain+0x10/0x10 [ 210.004336][T10370] ? validate_chain+0x11e/0x5920 [ 210.004349][T10370] ? __pfx_lock_acquire+0x10/0x10 [ 210.004366][T10370] ? __pfx_lock_release+0x10/0x10 [ 210.004384][T10370] ? __pfx_validate_chain+0x10/0x10 [ 210.004397][T10370] ? mark_lock+0x9a/0x360 [ 210.004410][T10370] ? __lock_acquire+0x1397/0x2100 [ 210.004435][T10370] ? __pfx_lock_release+0x10/0x10 [ 210.004456][T10370] ? __pfx_rtnl_newlink+0x10/0x10 [ 210.004472][T10370] rtnetlink_rcv_msg+0x791/0xcf0 [ 210.004488][T10370] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 210.004505][T10370] ? __lock_acquire+0x1397/0x2100 [ 210.004521][T10370] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 210.004543][T10370] netlink_rcv_skb+0x206/0x480 [ 210.004559][T10370] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 210.004577][T10370] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 210.004600][T10370] ? netlink_deliver_tap+0x2e/0x1b0 [ 210.004616][T10370] netlink_unicast+0x7f6/0x990 [ 210.004633][T10370] ? __pfx_netlink_unicast+0x10/0x10 [ 210.004647][T10370] ? __virt_addr_valid+0x45f/0x530 [ 210.004659][T10370] ? __phys_addr_symbol+0x2f/0x70 [ 210.004670][T10370] ? __check_object_size+0x47a/0x730 [ 210.004688][T10370] netlink_sendmsg+0x8de/0xcb0 [ 210.004708][T10370] ? __pfx_netlink_sendmsg+0x10/0x10 [ 210.004725][T10370] ? aa_sock_msg_perm+0x91/0x160 [ 210.004744][T10370] ? __pfx_netlink_sendmsg+0x10/0x10 [ 210.004760][T10370] __sock_sendmsg+0x221/0x270 [ 210.004777][T10370] ____sys_sendmsg+0x53a/0x860 [ 210.004792][T10370] ? __pfx_____sys_sendmsg+0x10/0x10 [ 210.004804][T10370] ? __fget_files+0x2a/0x410 [ 210.004822][T10370] ? __fget_files+0x2a/0x410 [ 210.004840][T10370] __sys_sendmsg+0x269/0x350 [ 210.004852][T10370] ? __pfx_futex_wake+0x10/0x10 [ 210.004871][T10370] ? __pfx___sys_sendmsg+0x10/0x10 [ 210.004896][T10370] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 210.004914][T10370] ? do_syscall_64+0x100/0x230 [ 210.004929][T10370] ? do_syscall_64+0xb6/0x230 [ 210.004944][T10370] do_syscall_64+0xf3/0x230 [ 210.004958][T10370] ? clear_bhb_loop+0x35/0x90 [ 210.004976][T10370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.004992][T10370] RIP: 0033:0x7f0114d8d169 [ 210.005005][T10370] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 210.005016][T10370] RSP: 002b:00007f0115c37038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 210.005030][T10370] RAX: ffffffffffffffda RBX: 00007f0114fa6080 RCX: 00007f0114d8d169 [ 210.005039][T10370] RDX: 0000000000000000 RSI: 0000400000000000 RDI: 0000000000000006 [ 210.005047][T10370] RBP: 00007f0114e0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 210.005056][T10370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 210.005064][T10370] R13: 0000000000000000 R14: 00007f0114fa6080 R15: 00007ffe05b99388 [ 210.005078][T10370] [ 210.642996][T10370] 8021q: adding VLAN 0 to HW filter on device bond22 [ 210.660796][T10370] team0: Port device bond22 added [ 210.678575][T10377] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1371'.